Reference Guide

ManualsBrandsDell ManualsBSAFEBSAFE Cert-J

Security Policy

29.06.18

RSA BSAFE

Cert-J 6.2.4 Security Policy

This document is a non-proprietary security policy for RSA BSAFE Cert-J 6.2.4

(Cert-J) security software.

This document may be freely reproduced and distributed whole and intact including

the copyright notice.

Contents:

Preface .............................................................................................................. 2

References ................................................................................................ 2

Terminolog y ............................................................................................... 2

Document Organization ........................................................................... 3

Cert-J Helper Functions .................................................................................. 4

Module Interfaces ..................................................................................... 4

Roles, Authentication and Services ........................................................ 4

Crypto-Officer Role ............................................................................ 4

Crypto User Role ............................................................................... 5

FIPS 140-2 Security Level 2 Operation .......................................... 5

Secure Operation of Cert-J ............................................................................. 6

Acronyms .......................................................................................................... 6

Summary of content (6 pages)

PAGE 1
Security Policy 29.06.18 RSA BSAFE® Cert-J 6.2.4 Security Policy This document is a non-proprietary security policy for RSA BSAFE Cert-J 6.2.4 (Cert-J) security software. This document may be freely reproduced and distributed whole and intact including the copyright notice. Contents: Preface .............................................................................................................. 2 References .............................................................................................
PAGE 2
RSA BSAFE Cert-J 6.2.4 Security Policy Preface This document is a non-proprietary security policy for the Cert-J cryptographic toolkit from RSA. This security policy describes how Cert-J uses the Application Program Interfaces (APIs) of the Crypto-J FIPS 140-2 Cryptographic Module, RSA BSAFE Crypto-J JSAFE and JCE Software Module (Crypto-J JSAFE and JCE Software Module).
PAGE 3
RSA BSAFE Cert-J 6.2.4 Security Policy Document Organization This document explains the Cryptographic Module’s FIPS 140-2 relevant features and functionality. This document comprises the following sections: Preface • This section, Preface provides an overview to the Security Policy. • Cert-J Helper Functions presents a mapping of Cert-J API methods to the Crypto-J API services. • Secure Operation of Cert-J addresses the required configuration for the FIPS140-mode of operation.
PAGE 4
RSA BSAFE Cert-J 6.2.4 Security Policy Cert-J Helper Functions Module Interfaces As a multi-chip standalone module, the Cryptographic Module’s physical interfaces consist of the keyboard, mouse, monitor, serial ports, network adapters, and so on. However, the underlying logical interface to the Cryptographic Module is the API documented in the Crypto-J Toolkit section of the RSA BSAFE Cert-J Developers Guide. The Cryptographic Module provides Control Input through the API calls.
PAGE 5
RSA BSAFE Cert-J 6.2.4 Security Policy After the initial load of the Cryptographic Module, an on-demand call to the self-tests results only in the performance of the known answer tests and pair-wise consistency checks. To view the services available to the Crypto Officer role, see the RSA BSAFE Crypto-J JSAFE and JCE Software Module Security Policy documents. Crypto User Role The default operator role is the Crypto User role. An operator can explicitly assume the User role by invoking the com.rsa.jsafe.
PAGE 6
RSA BSAFE Cert-J 6.2.4 Security Policy Secure Operation of Cert-J Please refer to “Secure Operation of the Module” in the RSA BSAFE Crypto-J JSAFE and JCE Software Module Security Policy documents for detailed information about how to operate the Cryptographic Module securely and he security levels, and the RSA BSAFE Crypto-J FIPS Compliance Guide for a definition of the FIPS 140-2 modes. The default initial mode of Cert-J is FIPS140_MODE. The initial mode can be configured through the use of the com.rsa.