FIPS probe commands -- fips algorithm verify

Use fips algorithm verify to execute algorithm test vectors.

Syntax

fips algorithm verify param param

Views

Probe view

Predefined user roles

network-admin

Parameters

param param: Specifies the algorithm to be tested.

Usage guidelines

This command is available only in FIPS mode.

The test results are saved to files. You can send the files to a third party to verify the algorithm.

FIPS probe commands -- fips kdf

Use fips kdf to derive a key from an import file and save it to an export file.

Syntax

fips kdf { ikev1 { dsa | psk } | ikev2 | snmp | ssh | tls } import inputfile export outputfile

Views

Probe view

Predefined user roles

network-admin

Parameters

ikev1: Specifies the IKEv1 key derivation.

dsa: Specifies the DSA key derivation.

psk: Specifies the pre-shared key derivation.

ikev2: Specifies the IKEv2 key derivation.

snmp: Specifies the SNMP key derivation.

ssh: Specifies the SSH key derivation.

tls: Specifies the TLS key derivation.

import inputfile: Imports a file to derive a key. The inputfile argument represents the import file name.

export outputfile: Exports the generated key to a file. The outputfile argument represents the export file name.

Usage guidelines

This command is available only in FIPS mode.

This command resolves the import file, sends the specified parameters to the key derivation module for key calculation, and saves the key to the export file.

You can send the export file to a third party to determine whether the key meets the CC/FIPS authentication requirements.

FIPS probe commands -- fips rng entropy size filename

Use fips rng entropy size filename to generate a random number entropy and save it to a file.

Syntax

fips rng entropy size entropy-size filename filename

Views

Probe view

Predefined user roles

network-admin

Parameters

size entropy-size: Specifies the size of the random number entropy, in the range of 1 to 1000000 bytes.

filename filename: Specifies the name of the file for saving the random number entropy. The filename argument is a case-insensitive string.

Usage guidelines

This command is available only in FIPS mode.

You can send the file to a third party to determine whether the entropy meets the CC authentication requirements.

FIPS probe commands -- fips rng entropy size round rate-statistics

Use fips rng entropy size round rate-statistics to calculate and display the average rate at which random number entropies are generated.

Syntax

fips rng entropy size entropy-size round round rate-statistics

Views

Probe view

Predefined user roles

network-admin

Parameters

size entropy-size: Specifies the size of the random number entropy, in the range of 1 to 1000000 bytes.

round round: Specifies the number of random number entropy generations, in the range of 3 to 10.

Usage guidelines

This command is available only in FIPS mode.

FIPS probe commands -- fips rng random size filename

Use fips rng random size filename to generate a random number and save it to a file.

Syntax

fips rng random size random-size filename filename

Views

Probe view

Predefined user roles

network-admin

Parameters

size random-size: Specifies the size of the random number, in the range of 1 to 1000000 bytes.

filename filename: Specifies the name of the file for saving the random number. The filename argument is a case-insensitive string.

Usage guidelines

This command is available only in FIPS mode.

You can send the file to a third party to determine whether the random number meets the CC authentication requirements.

FIPS probe commands -- fips rng random size round rate-statistics

Use fips rng random size round rate-statistics to calculate and display the average rate at which random numbers are generated.

Syntax

fips rng random size random-size round round rate-statistics

Views

Probe view

Predefined user roles

network-admin

Parameters

size random-size: Specifies the size of the random number, in the range of 1 to 1000000 bytes.

round round: Specifies the number of random number generations, in the range of 3 to 10.

Usage guidelines

This command is available only in FIPS mode.