OpenSSL FIPS Object Module v2.0 用户手册

需积分: 9 115 浏览量更新于2024-07-18 收藏 1.87MB PDF 举报

"openssl-UserGuide(用户手册2.0)" 是一份关于OpenSSL FIPS Object Module v2.0的用户指南，适用于验证号为1747、2398和2373的版本，包括从v2.0.1到v2.0.12的所有修订版。这份文档由OpenSSL Validation Services (原OpenSSL Software Foundation)于2017年3月14日发布，旨在为开发者在使用OpenSSL时提供参考。 OpenSSL是一个强大的安全套接层（SSL）和传输层安全（TLS）协议实现库，广泛应用于网络通信的安全加密。FIPS（Federal Information Processing Standards）是美国联邦政府制定的信息处理标准，FIPS 140-2是其中关于密码模块安全性的标准。OpenSSL FIPS Object Module是OpenSSL库的一个组件，经过了FIPS 140-2认证，确保了其加密算法和实现符合严格的政府级安全标准。本用户指南详细介绍了如何在项目中集成和使用OpenSSL FIPS Object Module v2.0，内容可能包括但不限于： 1. **安装与配置**：如何下载、编译和安装OpenSSL库，以及启用FIPS模块的特定步骤。 2. **使用FIPS验证的加密算法**：列出支持的FIPS认证的加密算法，如AES、SHA、RSA等，并指导如何在代码中调用这些算法。 3. **API接口**：详细说明FIPS模块提供的API接口，包括初始化、数据加密解密、密钥管理等操作。 4. **验证流程**：解释FIPS验证过程，包括第三方测试机构的评估、文档审核和技术验证。 5. **错误处理与调试**：如何理解和解决在使用FIPS模块时遇到的问题，以及调试工具和技巧。 6. **兼容性和互操作性**：与其他OpenSSL版本或非FIPS模式下的兼容性，以及与其他软件系统的互操作性问题。 7. **安全性最佳实践**：推荐的安全配置和使用策略，以确保系统安全。 8. **更新与维护**：如何跟踪和应用新的修订版，以及更新FIPS模块的方法。此外，该文档还可能包含对赞助商的感谢，如DARPA的Transformative Apps Program、Intersoft International, Inc.、Department of Homeland Security Science and Technology Directorate，以及Dell Inc.等，它们对OpenSSL的开发和验证工作提供了支持。在实际开发过程中，开发者需要遵循文档中的指导，确保在满足FIPS 140-2合规性的同时，正确地利用OpenSSL FIPS Object Module v2.0来保护敏感数据和通信。同时，开发者还需要了解相关的版权和商标信息，如OpenSSL是OpenSSL Software Foundation的注册商标，文档本身则遵循Creative Commons Attribution 3.0 Unported License。

User Guide - OpenSSL FIPS Object Module v2.0

The FIPS Object Module was designed and implemented to meet FIPS 140-2, Level 1

requirements. There are no special steps required to ensure FIPS 140-2 compliant operation of the

FIPS Object Module, other than building, loading, and initializing the FIPS approved and HMAC-

SHA-1 digest verified source code. This process of generating the application executable object

from source code for all supported platforms

is documented in detail at §4 and §5.

The FIPS Object Module provides confidentiality, integrity signing, and verification services. The

FIPS Object Module supports the following algorithms: Triple DES, AES, CMAC, CCM, RSA (for

digital signatures), DH, DSA/DSA2, ECDSA/ECDSA2, SHA-1, SHA-224, SHA-256, SHA-384,

SHA-512, and HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-

SHA-512. The FIPS Object Module supports SP 800-90 and ANSI X9.31 compliant pseudo-

random number generators.

The FIPS Object Module supports the Suite B cryptographic algorithms and can be used with Suite

B cryptography exclusively. Suite B requires 128-bit security levels and forbids use of TLS lesser

than 1.2 (TLS 1.0 and 1.1 use MD5 as a PRF during key agreement).

The FIPS Object Module v2.0 is similar in many respects to the earlier OpenSSL FIPS Object

Module v1.2.x. The v1.2.4 was originally validated in late 2008 with validation certificate #1051;

that original validation has been extended several times to incorporate additional platforms.

The v1.2.x Module is only compatible with OpenSSL 0.9.8 releases, while the v2.0 Module is

compatible with OpenSSL 1.0.1 and 1.0.2 releases. The v2.0 Module is the best choice for all new

software and product development.

2.1 Terminology

2.1.1 FIPS 140-2 Specific Terminology

During the course of multiple validations it became clear that some terminology was interpreted

differently by OpenSSL developers, cryptographers, the CMVP and FIPS 140-2 specialists. In this

section some of the potential confusions in terminology are discussed.

Approved Mode

The FIPS 140-2 Approved Mode of Operation is the operation of the FIPS Object Module when all

requirements of the Security Policy have been met and the software has successfully performed the

power-up and self test operation (invocation of the FIPS_mode_set() function call). In this

document this Approved Mode is referred to simply as FIPS mode.

Crypto Officer

By definition, for all platforms to which the validation can be extended. Per the requirements of the Security Policy,

any change to the documented build process renders the result non-FIPS approved.

Page 16 of 225

User Guide - OpenSSL FIPS Object Module v2.0

System administrator. The FIPS 140-2 Crypto Officer

is the person having the responsibility and

access privileges to install, configure, and initialize the cryptographic software.

HMAC-SHA-1 digest

A HMAC-SHA-1 digest of a file using a specific HMAC key (the ASCII string

“etaonrishdlcupfm”). Such digests are referred to in this document as “digests” or

“fingerprints”. The digests are used for integrity checking to verify that the software in question

has not been modified or corrupted from the form originally used as the basis of the FIPS 140-2

validation.

Note that the PGP or GPG signatures traditionally used to check the integrity of open source

software distributions are not a component of any of the FIPS 140-2 integrity checks.

Module

The concept of the cryptographic module is important for FIPS 140-2, and it has subtle nuances in

this context. Conceptually the Module is the binary object code and data in the FIPS Object Module

for a running process.

The “cryptographic module” is often referred to simply as “module”. That term is capitalized in

this document as a reminder that it has a somewhat different meaning than assumed by software

developers outside of a FIPS 140-2 context.

Note that traditionally the executable (or shared library) file on disk corresponding to this Module

as a running process is also considered to be a Module

by the CMVP. An integrity check of the

entire executable file on disk prior to memory mapping is considered acceptable as long as that

executable file does not contain any extraneous

software. In this traditional case the specific

executable file is submitted for testing and thus the precise content (as a bit string) is known in

advance.

In the case of the FIPS Object Module only source code is submitted for validation testing, so the

bit string value of the binary object code in memory cannot be known in advance. A chain of

checks beginning with the source code and extending through each step in the transformation of the

source code into a running process was established to provide a check equivalent to that used by

more traditional object based validations.

The term “Officer” does not imply a requirement for a military or government official, although some military or

government organizations may choose to restrict the performance of this system administration role to certain official

capacities.

Presumably because the transformations of the disk resident file contents performed by the runtime loader are

considered to be well understood and sufficiently minimal.

The definition of what constitutes “extraneous” is not formally specified and subject to interpretation.

Page 17 of 225

剩余224页未读，继续阅读

lovzm

粉丝: 9
资源: 3

OpenSSL FIPS Object Module v2.0 用户手册

openssl开发手册

openssl-devel-1.0.1e-57.el6.x86_64-packages.zip

openssl-0.9.8k_WIN32_openssl-0.9.8k_WIN32_OpenSSL-Win32_openssl_

openssl-openssl-3.1.1.zip

OpenSSL-for-iPhone-master.zip_OpenSSL-for-iPhone_openssl_openssl

UDK2018搭建开发环境- openssl-OpenSSL-1-1-0g.zip

OpenSSL-1-1-1-stable静态库,OpenSSL-1-1-1-stable

openssl-cookbook-chinese-edition:openssl-cookbook 中文版

openssl和openssl-devel离线rpm安装包.zip_OPENSSL 库_openssl_openssl-deve

openssl-1.0.2u + openssl-1.0.2k

最新资源