Administration of the Avaya G350 Media Gateway - Avaya Support

Security rulesNote:5. The cryptographic module performs the following tests:●Power up Self-Tests:Cryptographic algorithm tests:● TDES Known Answer Test (tests DES performance as well)● AES Known Answer Test● SHA-1 Known Answer Test● HMAC-SHA-1 Known Answer Test● DRNG Known Answer Test● RSA Known Answer TestNote:FIPS 140-2 does not require execution of the Diffie-Hellman Known Answerself-test. A letter of conformance to the corresponding standard will be providedto NIST instead.Gateway Software Integrity Test (32 bit CRC verification) and Booter Integrity Test (32bit CRC verification)Critical Functions Tests:● NVRAM Integrity test● EEPROM Integrity Test● Conditional Self-Tests:● Continuous Random Number Generator (RNG) test - performed on all RNGs involvedin crypto activities in FIPS-approved mode. Performed for PRNG x9.31 and RandomSeed Generator.●Bypass Test● Firmware load test6. You can instruct the module to perform the power-up self-tests via power cycle.7. Prior to each use, the internal RNG is tested using the conditional test specified inFIPS 140-2 §4.9.2.8. Data output is inhibited during key generation, self-tests, zeroization, and error states.9. The module supports concurrent operators and maintains separation of roles and services.10. Users can plug-in and use any Avaya Media Module that does not support cryptographicfunctionality without restriction.11. Media modules with cryptographic functionality must be evaluated separately against theFIPS 140-2 requirements.Issue 3 January 2005 305