reproduced and distributed in its entirety without modification. Rancher Kubernetes Cryptographic Library FIPS 140-2 Non-Proprietary Security Policy Document Version 1.1 January Policy Rancher Kubernetes Cryptographic Library Page 2 of 16 References Ref Full Specification Name Date [140] FIPS 140-2, Security Requirements for Cryptographic Modules 12/3/2002 [140AA] [140AA] FIPS 140-2 Annex A: Approved Security Functions 6/10/2019 [140AC] FIPS 140-2 Annex C: Approved Random Number Generators 6/10/2019 [140AD] FIPS 140-2 Annex D: Approved Key Establishment Techniques

they are added to V(t+1). Preliminaries ??? Vasiliki Kalavri | Boston University 2020 8 Some algorithms model graph streams a sequence of vertex events. A vertex stream consists of events that contain and all of its neighbors. Although this model can enable a theoretical analysis of streaming algorithms, it cannot adequately model real-world unbounded streams, as the neighbors cannot be known in compID = 1 compID = 6 ??? Vasiliki Kalavri | Boston University 2020 22 • How can we run such algorithms if the graph is continuously generated as a stream of edges? • How can we perform iterative

no security against penetration. Similarly, poor key management may easily compromise strong algorithms.” NIST SP 800-57, Recommendation for Key Management Keys get old Key rotation ● Key rotation factors that influence the choice of cryptoperiod From NIST SP 800-57: ○ Strength of cryptographic algorithms used ○ Implementation ○ Operating environment ○ Volume of data ○ Re-keying method all key-management processes and procedures for cryptographic keys used for encryption of cardholder data, including the following: 3.6.4 Cryptographic key changes for keys that have reached the end of

--private-key-password=password The private key password. --digest-type=type Select the cryptographic digest algorithm to use in the signing. Possible values: SHA-256 (default), SHA-512 and SHA-1 Microsoft DB/KEX certificates to newly created VMs • Oracle Extension Pack: Fixed shipping the cryptographic support module for full VM encryption • GUI: Improved overall accessibility • GUI: Update the IDCT. The floating point DCT/IDCT algorithms are mainly a legacy feature, and they do not produce significantly more accuracy than the slow integer algorithms (to put numbers on this, the typical

extension pack providing the default cryptographic support for full VM en- cryption. This attribute is for choosing between multiple extension packs providing cryptographic sup- port. If only one is installed installed, it will automatically be the default one. The attribute value can be empty if no cryptographic extension pack is installed. ccclxvii Classes (interfaces) 204.1.26 logHistoryCount (read/write) cdiii Classes (interfaces) 229.5 isApproved boolean IVetoEvent::isApproved() If this event was approved. 229.6 isVetoed boolean IVetoEvent::isVetoed() If this event was vetoed. 230 IVirtualBox The

extension pack providing the default cryptographic support for full VM en- cryption. This attribute is for choosing between multiple extension packs providing cryptographic sup- port. If only one is installed installed, it will automatically be the default one. The attribute value can be empty if no cryptographic extension pack is installed. 340 5 Classes (interfaces) 5.194.1.26 logHistoryCount (read/write) unsigned if size is 0 - no veto. 5.219.5 isApproved boolean IVetoEvent::isApproved() If this event was approved. 5.219.6 isVetoed boolean IVetoEvent::isVetoed() If this event was vetoed. 5.220 IVirtualBox

extension pack providing the default cryptographic support for full VM en- cryption. This attribute is for choosing between multiple extension packs providing cryptographic sup- port. If only one is installed installed, it will automatically be the default one. The attribute value can be empty if no cryptographic extension pack is installed. 366 5 Classes (interfaces) 5.191.1.26 logHistoryCount (read/write) unsigned if size is 0 - no veto. 5.216.5 isApproved boolean IVetoEvent::isApproved() If this event was approved. 5.216.6 isVetoed boolean IVetoEvent::isVetoed() If this event was vetoed. 5.217 IVirtualBox

extension pack providing the default cryptographic support for full VM en- cryption. This attribute is for choosing between multiple extension packs providing cryptographic sup- port. If only one is installed installed, it will automatically be the default one. The attribute value can be empty if no cryptographic extension pack is installed. ccclxvii Classes (interfaces) 204.1.26 logHistoryCount (read/write) cdiii Classes (interfaces) 229.5 isApproved boolean IVetoEvent::isApproved() If this event was approved. 229.6 isVetoed boolean IVetoEvent::isVetoed() If this event was vetoed. 230 IVirtualBox The

extension pack providing the default cryptographic support for full VM en- cryption. This attribute is for choosing between multiple extension packs providing cryptographic sup- port. If only one is installed installed, it will automatically be the default one. The attribute value can be empty if no cryptographic extension pack is installed. 6.210.1.22 logHistoryCount (read/write) unsigned long ISystemProperties::logHistoryCount if size is 0 - no veto. 6.235.5 isApproved boolean IVetoEvent::isApproved() If this event was approved. 6.235.6 isVetoed boolean IVetoEvent::isVetoed() If this event was vetoed. 6.236 IVirtualBox

注意 注意 在一些 CSR 被批准前，以上输出可能不包括计算节点（也称为 worker 节点）。 2. 检查待处理的 CSR，并确保可以看到添加到集群中的每台机器都有 Pending 或 Approved 状态 的客户端请求： 输出示例 出示例 在本例中，两台机器加入了集群。您可能会在列表中看到更多已批准的 CSR。 3. 如果 CSR 没有获得批准，请在所添加机器的所有待处理 CSR 注意 注意 在一些 CSR 被批准前，以上输出可能不包括计算节点（也称为 worker 节点）。 2. 检查待处理的 CSR，并确保可以看到添加到集群中的每台机器都有 Pending 或 Approved 状态 的客户端请求： 输出示例 出示例 在本例中，两台机器加入了集群。您可能会在列表中看到更多已批准的 CSR。 3. 如果 CSR 没有获得批准，请在所添加机器的所有待处理 CSR 注意 注意 在一些 CSR 被批准前，以上输出可能不包括计算节点（也称为 worker 节点）。 2. 检查待处理的 CSR，并确保可以看到添加到集群中的每台机器都有 Pending 或 Approved 状态 的客户端请求： 输出示例 出示例 在本例中，两台机器加入了集群。您可能会在列表中看到更多已批准的 CSR。 3. 如果 CSR 没有获得批准，请在所添加机器的所有待处理 CSR