FIPS 140

FIPS 140 for Cryptographic Framework

The intent of this project is to make the necessary changes to that the cryptographic framework would pass a FIPS 140-2 evaluation.

Design

For design details, please see our top level design document .

Project Scope

Since a FIPS evaluation can only be done on a set of binaries getting the funding to do the actual evaluation is out of scope for an OpenSolaris community.  The intent here is to ensure the crypto framework in OpenSolaris could pass should distributions wish to do the evaluation.

Completed Work

• swrand now implemented using FIPS 186-2 RNG algorithm. See the RNG Design Document for details.
• Self test, POST and key consistency checks
• cryptoadm changes to enable FIPS 140 mode of operation.