Use in a compliant SP 800-90C RBG construction (SP 800-90C is still in draft).Conversion to a stand-alone entropy source validation (when this becomes available for SP 800-90B-compliant entropy sources at a future date TBD).The entropy source is bound to the FIPS 140-2 module validation and not eligible for the following:.The module’s validation certificate will be marked with a caveat: “CAVEAT: The module’s entropy source does not meet all the requirements of NIST SP 800-90B.”.They are only available for entropy sources in a FIPS 140-2 module.We will publish a table of all the requirements (i.e., all SHALL statements) extracted from SP 800-90B and indicate which of these are still required and which are optional.Ĭonditions on these provisional validations are as follows: Instead, they will only need to meet a subset of the requirements in SP 800-90B. In response to feedback from the recent Entropy Source Validation Workshop, as well as specific requests to move the deadline for mandatory compliance to NIST SP 800-90B, the CMVP has decided to allow provisional validation of FIPS 140-2 modules with entropy sources that do not meet all the requirements of NIST SP 800-90B. The SP 800-90B SHALL Statement spreadsheet discusses which requirements are allowed for a caveat.
Entropy submissions full#
The following email sent to the labs provides the full information about the caveats. As of August 10, 2021, the entropy caveats can be applied to a FIPS 140-2 entropy assessment report submission.
0 kommentar(er)
