Self-Tests - Enterasys X-Pedition XSR-1805 Owner's Manual

Self-Tests

The module performs a set of self-tests in order to ensure proper
operation in compliance with FIPS 140-2. These self-tests are run during
power-up (power-up self-tests) or when certain conditions are met
(conditional self-tests).
Power-up Self-tests:
• Software integrity tests: the modules use an EDC, in the form of an
• Cryptographic algorithm tests:
• Bypass mode test: the module performs SHA-1 check value
• Software load test: the module uses HMAC SHA-1 to check the
• Critical function test: during cold boot, the module performs power-
Conditional Self-tests:
• RSA pair-wise consistency test: this test is performed when RSA
• DSA pair-wise consistency test: this test is performed when DSA
Enterasys Networks
© Copyright 2003
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
MD5 checksum, to check the integrity of its various components
o AES-CBC KAT
o DES-CBC KAT
o Triple-DES-CBC KAT
o PRNG KAT
o RSA pair-wise consistency test (signing and verification)
o DSA pair-wise consistency test
o SHA-1 KAT
o HMAC SHA-1 KAT
verification to ensure that the IPSec policies are not modified.
validity of the software. Only validated software can be loaded into
the modules.
up diagnostics to verify the functionality of installed hardware
(memory and interfaces).
keys are generated for IKE.
keys are generated for SSHv2.
Page 20 of 25