CR-4056
Document is Uncontrolled When Printed.
Page 17 of 22
2.7
Self-Tests
The PSI-E2 Module performs a number of power-up and conditional self-tests to ensure proper
operation.
2.7.1 Power-Up Self-Tests
When the module is initially powered-on, each cryptographic library in the module executes its
own battery of power-up self-tests. If any of the power-up self-tests fail in any of the
cryptographic library implementations, the module will enter an error state and prohibit an
operator from exercising the module's cryptographic functionality. Table 2-11 lists the power-up
self-tests:
Test
Function
Where Performed
FIPS 140-
2
Required
Secure Memory File
System Integrity
Initializes and checks the module's secure memory file
system
Firmware
No
RNG KAT
Performs a known answer test for the AES CTR DRBG.
SafeXcel-3120
Yes
Symmetric Cipher
KATs
Performs known answer tests for AES, Triple-DES,
CAST, IDEA, RC2, DES, and RC4 operations
(encrypt/decrypt)
Firmware,
SafeXcel-3120,
SafeXcel-1746
(AES)
Firmware,
SafeXcel-1746
(Triple-DES)
AES and
Triple-
DES
MAC
and
HMAC KATs
Performs known answer tests for CAST MAC, IDEA
MAC, RC2 MAC, DES MAC and Triple-DES MAC.
Performs known answer tests for MD5 HMAC, HMAC-
SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-
SHA-384, HMAC-SHA-512, RMD128 HMAC and
RMD160 HMAC.
Firmware
Triple-
DES
MAC
HMAC-
SHA-1,
HMAC-
SHA-224,
HMAC-
SHA-256,
HMAC-
SHA-384,
HMAC-
SHA-512
Asymmetric Cipher
KATs
Performs known answer tests for RSA operations (sign
and verify, encrypt/decrypt).
Firmware
Yes
Asymmetric Key
Derive KATs
Performs known answer tests for ECDH1 Derive
Firmware
No
Asymmetric Pairwise
Consistency Test
Performs a pairwise consistency test on a DH key pair
Firmware
No
DH X9.42 Parameter
Verification KAT
Performs a known answer test on DH X9.42 Parameter
Verification algorithm
Firmware
Yes
DH X9.42 Pairwise
Consistency Test
Performs a pairwise consistency test on a random DH
X9.42 key pair
Firmware
Yes