Project

General

Profile

Actions

action #100575

closed

[sle][security][sle15sp4][feature][manual] SLE-21220 - QA: FIPS 140-3: make Libgcrypt module ready for certification process

Added by bchou over 2 years ago. Updated almost 2 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
New test
Target version:
-
Start date:
2021-10-07
Due date:
% Done:

100%

Estimated time:
40.00 h
Difficulty:

Description

https://jira.suse.com/browse/SLE-21220

Prepare Libgcrypt module for certification process under FIPS 140-3 standards. Make all code changes necessary, in Libgcrypt, to comply with FIPS 140-3 standards to pass the validation process of NIST and obtain the FIPS certificate for the module.

Confirmed platforms:

x86_64 intel
x86_64 AMD
aarch64

Platforms under evaluation, pending for confirmation:

s390x z15
IBM Power 9/10

Algorithms:

7 algorithms:

AES
SHS
RSA
DSA
HMAC
DRBG
ECDSA

*Note that we identified 8 algorithms at the beginning, including Triple-DES, however we decided to not include it due to its sunset in 2022.

Standards:

The standards to follow are the FIPS 140-3. See:

https://confluence.suse.com/download/attachments/411795603/140-3_SUSE_RA.pdf?version=1&modificationDate=1618334281277&api=v2

https://www.atsec.com/wp-content/uploads/2020/11/atsec_FIPS-140-3_vs_140-2.pdf

https://csrc.nist.gov/projects/fips-140-3-transition-effort

Actions #1

Updated by bchou almost 2 years ago

  • Status changed from New to Resolved
  • % Done changed from 0 to 100
  • Estimated time set to 40.00 h

We are still testing FIPS140-3 during the RC phase currently. The test scope and test plan are discussed with the Cert team already. Some confluence links can be referenced. Thank you.
FIPS-140-3-SLE15-SP4 Scope Test Plan
FIPS-140-3-SLE15-SP4 Schedule Test Plan
FIPS 140-3 QA Test Status
SLES15-SP4-Security-FIPS-Regression-Test (RC phase)

The overall test will be completed before the middle of May.

Actions

Also available in: Atom PDF