NIST 800-20：Triple Data Encryption Algorithm (TDEA)操作模式验证系统要求与流程

需积分: 10 93 浏览量更新于2024-07-24 收藏 1.22MB PDF 举报

NIST SP 800-20，全称为《美国国家标准：三重数据加密算法（Triple Data Encryption Algorithm，TDEA）操作模式验证系统（Modes of Operation Validation System, TMOVS）：要求与程序》，由美国国家标准与技术研究院（National Institute of Standards and Technology, NIST）发布。该文档于1999年10月首次发布，后在2000年4月进行了修订。该标准旨在为TDEA，一种广泛应用于信息安全领域的对称密钥加密算法，提供操作模式的验证方法和流程。 TDEA，也被称为3DES，是一种加强版的DES（Data Encryption Standard），通过三次应用DES算法以提高加密强度。TMOVS的设计目标是确保在实际应用中，无论是在软件、硬件或协议中使用TDEA时，其各种模式（如ECB、CBC、CFB、OFB等）的正确性和安全性都能得到验证。文档的主要内容包括了对TDEA各模式操作的详细描述，如电子密码本（ECB）、块密码模式（CBC）、循环反馈模式（CFB）、输出反馈模式（OFB）等。它阐述了如何设计和执行测试，以检查这些模式在不同场景下的性能和安全性，防止潜在的漏洞或错误。此外，修订版本还对文档结构进行了调整，统一了术语并强调了对“通过”符号的处理，即用“…”代替“-”。 TMOVS的要求和程序着重于以下几个方面： 1. **测试设计**：文档提供了构建验证测试套件的方法，包括选择合适的测试案例、生成随机输入以及定义预期的输出。 2. **验证过程**：包括了实际运行加密和解密操作，对比实际结果与预期结果的一致性，以及评估可能的偏差或错误。 3. **安全评估**：测试过程中不仅要验证加密性能，还要关注密码学安全，如处理明文泄露、选择性密文攻击等可能的威胁。 4. **文档一致性**：确保所有文档对于TDEA操作模式的描述和实践保持一致，以便于开发者和审计人员参考。遵循NIST SP 800-20的标准，组织在采用TDEA时可以确保其使用的模式符合公认的最佳实践，增强了系统的安全性，并且能够满足美国政府和其他机构对信息安全的严格要求。对于IT专业人士来说，理解和遵循这个标准至关重要，因为它影响着加密方案的实施和安全性评估。

xvi

Table A.4 Values To Be Used for the Substitution Table Known Answer Test for the TECB,

TCBC, TCFB, and TOFB Modes of Operation................................................................271

Table A.5 Resulting Ciphertext from the Variable Plaintext Known Answer Test for TCBC-I

Mode of Operation..........................................................................................................273

Table A.6 Resulting Ciphertext from the Inverse Permutation Known Answer Test for TCBC-I

Mode of Operation (Encryption Process)........................................................................278

Table A.7 Resulting Ciphertext from the Initial Permutation Known Answer Test for TCBC-I

Mode of Operation (Decryption Process).........................................................................281

Table A.8 Values To Be Used for the Substitution Table Known Answer Test for TCBC-I Mode

of Operation....................................................................................................................284

Table A.9 Resulting Ciphertext from the Variable TEXT Known Answer Test for TCFB-P and

TOFB-I Modes of Operation ...........................................................................................285

Table A.10 Values to be Used for the Substitution Table Known Answer Test for TCFB-P and

TOFB-I Modes of Operation ...........................................................................................290

Table A.11 Resulting Ciphertext from the Variable KEY Known Answer Test for TCBC-I,

TCFB-P and TOFB-I Modes of Operation.......................................................................292

Table A.12 Values To Be Used for the Permutation Operation Known Answer Test for TCBC-I,

TCFB-P and TOFB-I Modes of Operation.......................................................................296

ABSTRACT

The National Institute of Standards and Technology (NIST) Triple Data Encryption Algorithm

(TDEA) Modes of Operation Validation System (TMOVS) specifies the procedures involved in

validating implementations of the Triple DES algorithm in FIPS PUB 46-3 Data Encryption

Standard (DES) (and ANSI X9.52 – 1998). The TMOVS is designed to perform automated

testing on Implementations Under Test (IUTs). This publication provides brief overviews of the

Triple DES algorithm and introduces the basic design and configuration of the TMOVS. Included

in this overview are the specifications for the two categories of tests that make up the TMOVS,

i.e., the Known Answer tests and the Monte Carlo tests. The requirements and administrative

procedures to be followed by those seeking formal NIST validation of an implementation of the

Triple DES algorithm are presented. The requirements described include the specific protocols for

communication between the IUT and the TMOVS, the types of tests which the IUT must pass for

formal NIST validation, and general instructions for accessing and interfacing with the TMOVS.

An appendix with tables of values and results for the Triple DES Known Answer tests is also

provided.

Key words: automated testing, computer security, cryptographic algorithms, cryptography, Triple

Data Encryption Algorithm (TDEA), Triple Data Encryption Standard (TDES), Federal

Information Processing Standard (FIPS), NVLAP, secret key cryptography, validation.

1. Introduction

1.1 Background

The publication specifies the tests required to validate Implementations Under Test (IUTs) for

conformance to the Triple DES algorithm (TDEA) as specified in ANSI X9.52, Triple Data

Encryption Algorithm Modes of Operation. When applied to IUTs that implement the TDEA, the

TDEA Modes of Operation Validation System (TMOVS) provides testing to determine the

correctness of the algorithm implementation. This involves both testing the specific components

of the algorithm, as well as, exercising the entire algorithm implementation. In addition to

determining conformance, the TMOVS is structured to detect implementation flaws including

pointer problems, insufficient allocation of space, improper error handling, and incorrect behavior

of the TDEA implementation.

The TMOVS is composed of two types of validation tests, the Known Answer tests and the

Monte Carlo tests. The validation tests are based on the standard DES test set and the Monte

Carlo test described in Special Publication 800-17, Modes of Operation Validation System

(MOVS): Requirements and Procedures. By applying the same framework specified in Special

Publication 800-17 to TDES, the TMOVS specifies how to validate implementations of the

TDEA in software, firmware, hardware, or any combination thereof.

The Known Answer tests are designed to verify the components of the DES algorithm in the IUT

(e.g., S boxes, permutation tables,…). The tests exercise each bit of every component of the

algorithm implementation. This is accomplished by processing all possible basis vectors through

the IUT. To perform the Known Answer tests, the TMOVS supplies known values to the IUT

and the IUT then processes the input through the implemented algorithm. The results produced

by the IUT are compared to the expected values.

The Monte Carlo Test is designed to exercise the entire implementation of the TDEA, as opposed

to testing only the individual components. The purpose of the Monte Carlo Test is to detect the

presence of flaws in the IUT that were not detected with the controlled input of the Known

Answer test. The Monte Carlo Test does not guarantee ultimate reliability of the IUT that

implements the TDEA (i.e., hardware failure, software corruption, etc.). To perform the Monte

Carlo Test, the TMOVS supplies the IUT with pseudorandom values for the initial plaintext,

key(s), and, if applicable, initialization vector(s). Using these values, the IUT is exercised through

four million DES encryption/decryption iterations. The results are then compared to the expected

values.

The successful completion of the tests contained within the TMOVS is required to claim

conformance of Triple DES implementations as defined in FIPS PUB 46-3, Data Encryption

Standard (DES). Testing for single DES implementations is defined in Special Publication 800-

17, Modes of Operation Validation System (MOVS): Requirements and Procedures. Testing for

the cryptographic module in which Triple DES is implemented is defined in FIPS PUB 140-1,

Security Requirements for Cryptographic Modules.

1.2 Organization

Section 2 gives a brief overview of the Triple DES algorithm and the five modes of operation

allowed by this algorithm as well as the interleaved and pipelined versions of several of these

modes. Section 3 provides an overview of the tests that make up the Triple DES Modes of

Operation Validation System (TMOVS). Section 4 describes the basic protocol used by the

TMOVS. Section 5 provides a detailed explanation of each test required by the TMOVS to

validate an IUT of the TDEA. Section 6 outlines the design of the TMOVS. Appendix A

provides tables of values for the Known Answer tests for TDEA. These tables include:

— For modes of operation including TECB, TCBC, TCFB, and TOFB:

Table A.1 - Resulting Ciphertext from the Variable Plaintext Known Answer Test

Table A.2 - Resulting Ciphertext from the Variable Key Known Answer Test

Table A.3 - Values to be Used for the Permutation Operation Known Answer Test

Table A.4 - Values to be Used for the Substitution Tables Known Answer Test

— For the TCBC-I mode of operation:

Table A.5 - Resulting Ciphertext from the Variable Plaintext Known Answer Test for

TCBC-I

剩余314页未读，继续阅读

clark200

粉丝: 3
资源: 7

NIST 800-20：Triple Data Encryption Algorithm (TDEA)操作模式验证系统要求与流程

NIST SP800-20：TDEA操作验证系统：自动化测试与加密标准要求

NIST SP800-53安全控制措施标准中英文版发布

"NIST SP800-30 IT系统风险管理指南详解

NIST SP800-20.pdf

NIST SP800-108

nist800-53

NIST SP800-26

nist sp800-53

NIST 800-92

NIST SP800-82-中文版

最新资源