2.2 Usage of AES OFB, CFB and CFB8 ..... 16 9.2.3 Usage of AES-GCM ..... 16 9.2.4 Usage of Triple-DES ..... 16 9.2.5 RSA and ECDSA Keys ..... 16 ## 1 Introduction This non-proprietary security policy |---|---|---|---|---| |Module Initialization|N/A|N/A|CO|N/A| |Symmetric Encryption/Decryption|AES, Triple-DES|AES, Triple-DES symmetric keys|User, CO|Execute| |Keyed Hashing|HMAC-SHA|HMAC key|User, CO|Execute| |H Functions|Roles|Keys and/or CSPs| |---|---|---|---| |Symmetric Encryption/Decryption|AES (non-compliant), DES, Triple-DES (non-compliant)|User, CO|N/A| |Hashing|MD4, MD5, POLYVAL|User, CO|N/A| |Signature Generation/Verification|RSA

keys • CBC Block Ciphers - RC2 with 40 bit key - DES with 40 bit key - DES with 56 bit key - Triple-DES with 168 bit key - Idea (128 bit key) – Fortezza (96 bit key) Here "CBC" refers to Cipher OpenSSL is installed and in your PATH. 2. Create a RSA private key for your Apache server (will be Triple-DES encrypted and PEM formatted): $ openssl genrsa -des3 -out server.key 1024 Please backup this create a self-signed Certificate as follows: 1. Create a RSA private key for your server (will be Triple-DES encrypted and PEM formatted): $ openssl genrsa -des3 -out server.key 1024 Please backup this

128-bit keys • CBC Block Ciphers ■ RC2 with 40 bit key DES with 40 bit key DES with 56 bit key Triple-DES with 168 bit key Idea (128 bit key) ■ Fortezza (96 bit key) "CBC" refers to Cipher Block OpenSSL is installed and in your PATH. 2. Create a RSA private key for your Apache server (will be Triple-DES encrypted and PEM formatted): $ openssl genrsa -des3 -out server.key 1024 Please backup this create a self-signed Certificate as follows: 1. Create a RSA private key for your server (will be Triple-DES encrypted and PEM formatted): $ openssl genrsa -des3 -out server.key 1024 Please backup this

128-bit keys • CBC Block Ciphers ■ RC2 with 40 bit key DES with 40 bit key DES with 56 bit key Triple-DES with 168 bit key Idea (128 bit key) ■ Fortezza (96 bit key) "CBC" refers to Cipher Block OpenSSL is installed and in your PATH. 2. Create a RSA private key for your Apache server (will be Triple-DES encrypted and PEM formatted): $ openssl genrsa -des3 -out server.key 1024 Please backup this create a self-signed Certificate as follows: 1. Create a RSA private key for your server (will be Triple-DES encrypted and PEM formatted): $ openssl genrsa -des3 -out server.key 1024 Please backup this

keys • CBC Block Ciphers - RC2 with 40 bit key - DES with 40 bit key – DES with 56 bit key - Triple-DES with 168 bit key - Idea (128 bit key) – Fortezza (96 bit key) "CBC" refers to Cipher OpenSSL is installed and in your PATH. 2. Create a RSA private key for your Apache server (will be Triple-DES encrypted and PEM formatted): $ openssl genrsa -des3 -out server.key 1024 Please backup this create a self-signed Certificate as follows: 1. Create a RSA private key for your server (will be Triple-DES encrypted and PEM formatted): $ openssl genrsa -des3 -out server.key 1024 Please backup this

128-bit keys • CBC Block Ciphers ■ RC2 with 40 bit key DES with 40 bit key DES with 56 bit key Triple-DES with 168 bit key Idea (128 bit key) ■ Fortezza (96 bit key) "CBC" refers to Cipher Block OpenSSL is installed and in your PATH. 2. Create a RSA private key for your Apache server (will be Triple-DES encrypted and PEM formatted): $ openssl genrsa -des3 -out server.key 1024 Please backup this create a self-signed Certificate as follows: 1. Create a RSA private key for your server (will be Triple-DES encrypted and PEM formatted): $ openssl genrsa -des3 -out server.key 1024 Please backup this

keys • CBC Block Ciphers - RC2 with 40 bit key - DES with 40 bit key – DES with 56 bit key - Triple-DES with 168 bit key - Idea (128 bit key) – Fortezza (96 bit key) "CBC" refers to Cipher OpenSSL is installed and in your PATH. 2. Create a RSA private key for your Apache server (will be Triple-DES encrypted and PEM formatted): $ openssl genrsa -des3 -out server.key 2048 Please backup this create a self-signed certificate as follows: 1. Create a RSA private key for your server (will be Triple-DES encrypted and PEM formatted): $ openssl genrsa -des3 -out server.key 2048 Please backup this

keys • CBC Block Ciphers - RC2 with 40 bit key - DES with 40 bit key – DES with 56 bit key - Triple-DES with 168 bit key - Idea (128 bit key) – Fortezza (96 bit key) "CBC" refers to Cipher OpenSSL is installed and in your PATH. 2. Create a RSA private key for your Apache server (will be Triple-DES encrypted and PEM formatted): $ openssl genrsa -des3 -out server.key 2048 Please backup this create a self-signed Certificate as follows: 1. Create a RSA private key for your server (will be Triple-DES encrypted and PEM formatted): $ openssl genrsa -des3 -out server.key 2048 Please backup this

keys • CBC Block Ciphers - RC2 with 40 bit key - DES with 40 bit key – DES with 56 bit key - Triple-DES with 168 bit key - Idea (128 bit key) – Fortezza (96 bit key) "CBC" refers to Cipher OpenSSL is installed and in your PATH. 2. Create a RSA private key for your Apache server (will be Triple-DES encrypted and PEM formatted): $ openssl genrsa -des3 -out server.key 2048 Please backup this create a self-signed certificate as follows: 1. Create a RSA private key for your server (will be Triple-DES encrypted and PEM formatted): $ openssl genrsa -des3 -out server.key 2048 Please backup this

keys • CBC Block Ciphers – RC2 with 40 bit key – DES with 40 bit key – DES with 56 bit key - Triple-DES with 168 bit key - Idea (128 bit key) – Fortezza (96 bit key) "CBC" refers to Cipher OpenSSL is installed and in your PATH. 2. Create a RSA private key for your Apache server (will be Triple-DES encrypted and PEM formatted): $ openssl genrsa -des3 -out server.key 2048 Please backup this create a self-signed Certificate as follows: 1. Create a RSA private key for your server (will be Triple-DES encrypted and PEM formatted): $ openssl genrsa -des3 -out server.key 2048 Please backup this