FIPS140-2Non-Proprietary方案.PDFVIP

FIPS 140-2 Non-Proprietary Security Policy Aegis Secure Key 3.0 Cryptographic Module Author: Robert Davidson Date: Friday, May 13, 2016 Document Issue: REV C May 13, 2016 This document may be copied without the author’s permission, provided that it is copied in its entirety without any modification. Apricorn is a trademark or a registered trademark of Apricorn, Inc. in certain countries. All Apricorn product names and logos are trademarks or registered trademarks of Apricorn, Inc. in certain countries. All other company and product names and logos are trademarks or registered trademarks of their respective owners in certain countries. Aegis Secure Key 3.0 Cryptographic Module Cryptographic Module Security Policy Table of Contents 1.  References 3  2. Target Audience 3  3. Introduction 4  3.1 Purpose of the Security Policy 4  3.2 Cryptographic Module Description 4  4. Security Levels 7  5. Interfaces and Ports 8  6. Cryptographic Key and CSP Management 8  6.1 PIN Access Codes 8  6.2 Random Number Generation 8  6.3 AES Master Key 8  6.4 Zeroization 8  7. Identification and Authentication Policy 9  7.1 Roles 9  7.2 Authentication 10  8. Access Control Policy 11  9. Physical Security Policy 12  10. Regulatory Compliance 12  11. Security Rules 13  12. Mitigation of Other Attacks Policy 14  13. Acronyms 15  Appendix A. Critical Security Parameters 16  © Apricorn Inc. May 13, 2016 Page 2 of 16 Aegis Secure Key 3.0 Cryptographic Module Cryptographic Module Security Policy Revision History Version 1.0 Initial Public Release Version 1.1 Addition of Firmware Version 6.5.1 Version 1.2