Table of Contents
Advertisement
Service
Modular Exponentiation
using CRT (note 3)
Modular Exponentiation
(note 3)
RSA Encrypt (note 8)
RSA Decrypt (note 8)
Digital Signature Standard
Sign (note 1)
Digital Signature Standard
Verification (note 1)
Self-test
Firmware Update
Generate Random Number
Get Configuration
Get Status
Verify Firmware
SHA1 Hash
SHA1 HMAC (note 1)
MD5 Hash
MD5 HMAC (note 1)
Note 1 =
The key for these commands is input through the PCI bus (data input interface)
Note 2 =
This is a PKCS 12 method for deriving a 3DES key from a password, salt and iteration count.
Note 3 =
The Exponentiation Using CRT and Exponentiation functions are generic math functions; all
parameters are input through the PCI interface (data input interface).
Note 4 =
When operating in the FIPS140-1 mode, it is not possible for secret keys, private keys or critical
security parameters to cross the PCI bus without being wrapped (encrypted) using the Key-Wrapping
Key.
Note 5 =
User Login is the process that takes the board from an unauthenticated state to the authenticated
state. Only one user may be authenticated at a particular time. Consequently, the User Login process
cannot be started from the authenticated state. Nonetheless, the User Login process cannot be
completed successfully without authentication.
Note 6 =
This command is used for generating the key-wrapping-key.
Note 7 =
When the board is in the zeroized state, it is possible to for an unauthenticated user to uninitialize
the board.
Note 8 =
These operations must access stored cryptographic keys. The keys may not be input through the
PCI interface.
Copyright © 2007-2008 Nortel Networks
.
FIPS140-1 Level 3 Mode
Not auth
User
SO Role
enticated
Role
YES
YES
YES
YES
YES
YES
NO
NO
NO
NO
NO
NO
NO
NO
NO
NO
NO
NO
YES
YES
YES
NO
NO
YES
YES
YES
YES
YES
YES
YES
YES
YES
YES
Image
NO
NO
NO
YES
YES
NO
NO
NO
NO
NO
NO
NO
NO
NO
Nortel VPN Gateway
User Guide
NN46120-104 02.01 Standard
14 April 2008
9.0 Roles and Services 243
Non- FIPS140-1 Mode
Not auth
User
SO Role
enticated
Role
YES
YES
Yes
YES
YES
YES
NO
YES
YES
NO
YES
YES
YES
YES
YES
YES
YES
YES
YES
YES
YES
NO
NO
YES
YES
YES
YES
YES
YES
YES
YES
YES
YES
YES
NO
NO
YES
YES
YES
YES
YES
YES
YES
YES
YES
YES
YES
YES
SRDIs Access
ed
None
None
EPK (use)
DPK (use)
None
None
None
None
PRNGKey (crea
te, destroy)
None
None
YES
None
None
None
None
Advertisement
Table of Contents
