Cisco IPS4345 Instrukcja Użytkownika Pobierz pdf (Strona 57)

Cisco Intrusion Prevention System Security Target

57

Section

Shall/Shall Not

Statement(s)

Should (Not) Statements

2

TOE

Compliant?

Rationale

6.2.2 Formats

N/A, no shall

statements

None.

Yes

N/A

6.2.3 Parameter

Length Sets

None.

“The MacKey length shall

meet or exceed the target

security strength, and should

meet or exceed the security

strength of the modulus.”

Yes

N/A

6.3 RSA Key Pair

Generators

None.

None.

Yes

N/A

6.3.1 RSAKPG1

Family: RSA Key Pair

Generation with a

Fixed Public Exponent

No shall statements

(def of approved key

pair generator)

None.

Yes

N/A

6.3.2 RSAKPG2

Family: RSA Key Pair

Generation with a

Random Public

Exponent

No shall statements

(def of approved key

pair generator)

None.

Yes

N/A

6.4 Assurances of

Validity

N/A, no shall

statements

None.

Yes

N/A

6.4.1 Assurance of

Key Pair Validity

None.

None.

Yes

N/A

6.4.2 Recipient

Assurances of Public

Key Validity

None.

None.

Yes

N/A

6.5 Assurances of

Private Key Possession

None.

None.

Yes

N/A

6.5.1 Owner

Assurance of Private

Key Possession

None.

None.

Yes

N/A

6.5.2 Recipient

Assurance of Owner’s

Possession of a Private

Key

None.

None.

Yes

N/A

6.6 Key Confirmation

None.

None.

Yes

N/A

6.6.1 Unilateral Key

Confirmation for Key

Establishment

Schemes

Unilateral Key

Confirmation is done

for both TLS and

SSH, however it

varies slightly from

that outlined here.

None.

Yes

N/A

6.6.2 Bilateral Key

Confirmation for Key

Establishment

Schemes

N/A, no shall

statements

None.

Yes

N/A

6.7 Authentication

N/A, no shall

statements

None.

Yes

N/A

7 IFC Primitives and

Operations

N/A, no shall

statements

None.

Yes

N/A

7.1 Encryption and

Decryption Primitives

N/A, no shall

statements

None.

Yes

N/A

1 2 ... 52 53 54 55 56 57 58 59 60 61

Komentarze do niniejszej Instrukcji

Brak uwag