Reference Guide

ManualsBrandsDell ManualsBSAFEBSAFE SSL-J

Security Policy

13.11.19

RSA BSAFE

SSL-J 6.2.6 Security Policy

This document is a non-proprietary security policy for RSA BSAFE SSL-J 6.2.6

(SSL-J) security software.

This document may be freely reproduced and distributed whole and intact including

the copyright notice.

Contents:

Preface .............................................................................................................. 2

References ................................................................................................ 2

Terminolog y ............................................................................................... 2

Document Organization ........................................................................... 3

SSL-J Helper Functions .................................................................................. 4

Module Interfaces ..................................................................................... 4

Roles, Authentication and Services ........................................................ 4

Crypto-Officer Role ............................................................................ 4

Crypto User Role ............................................................................... 5

FIPS 140-2 Security Level 2 Operation .......................................... 5

Secure Operation of SSL-J ............................................................................. 6

FIPS 140-2 Compliance ........................................................................... 6

Acronyms .......................................................................................................... 7

Summary of content (7 pages)

PAGE 1
Security Policy 13.11.19 RSA BSAFE® SSL-J 6.2.6 Security Policy This document is a non-proprietary security policy for RSA BSAFE SSL-J 6.2.6 (SSL-J) security software. This document may be freely reproduced and distributed whole and intact including the copyright notice. Contents: Preface .............................................................................................................. 2 References ................................................................................................
PAGE 2
RSA BSAFE SSL-J 6.2.6 Security Policy Preface This document is a non-proprietary security policy for SSL-J security software, from RSA. This security policy describes how SSL-J uses the Application Program Interfaces (APIs) of the Crypto-J FIPS 140-2 Cryptographic Module, RSA BSAFE Crypto-J JSAFE and JCE Software Module 6.2.5 (Crypto-J JSAFE and JCE Software Module). For more information about the Cryptographic Module, see the RSA BSAFE Crypto-J JSAFE and JCE Software Module Security Policy documents.
PAGE 3
RSA BSAFE SSL-J 6.2.6 Security Policy Document Organization This Security Policy explains the FIPS 140-2 relevant features and functionality of the Cryptographic Module. This document comprises the following sections: Preface • Preface provides an overview to the Security Policy. • SSL-J Helper Functions presents a mapping of SSLJ and JSSE API methods to the Crypto-J API services. • Secure Operation of SSL-J addresses the required configuration for the FIPS140-mode of operation.
PAGE 4
RSA BSAFE SSL-J 6.2.6 Security Policy SSL-J Helper Functions Module Interfaces As a multi-chip standalone module, the Cryptographic Module’s physical interfaces consist of the keyboard, mouse, monitor, serial ports, network adapters, and so on. However, the underlying logical interface to the Cryptographic Module is the API documented in the Welcome to the Crypto-J Toolkit section of the RSA BSAFE SSL-J Developers Guide. The Cryptographic Module provides Control Input through the API calls.
PAGE 5
RSA BSAFE SSL-J 6.2.6 Security Policy When Crypto-J is loaded, the power-up self-tests are automatically run. Once the integrity check is passed, it will not run again unless the Cryptographic Module is unloaded and then reloaded. After the initial load of the Cryptographic Module, an on-demand call to the self-tests results only in the performance of the known answer tests and pair-wise consistency checks. Crypto User Role By default, an operator is in the Crypto User role.
PAGE 6
RSA BSAFE SSL-J 6.2.6 Security Policy Secure Operation of SSL-J Please refer to Secure Operation of the Module in the RSA BSAFE Crypto-J JSAFE and JCE Software Module Security Policy documents for detailed information about how to operate the Cryptographic Module securely, and the RSA BSAFE Crypto-J FIPS Compliance Guide for a definition of the FIPS 140-2 modes. The default initial mode of Crypto-J is FIPS140_MODE. The initial mode can be configured through the use of the com.rsa.cryptoj.
PAGE 7
RSA BSAFE SSL-J 6.2.6 Security Policy Acronyms This table lists the definitions for the acronyms used in SSL-J. Acronyms Acronym Definition API Application Programming Interface. CO Crypto Officer, a security system user role. FIPS Federal Information Processing Standards. JSSE Java Secure Socket Extension.