130 reputation
4
bio website
location
age 35
visits member for 2 years, 1 month
seen Feb 5 '13 at 20:11

Feb
5
comment A SW system constructed with Microsoft CNG can be FIPS 140-2 Level 2 Compliant?
Yes! They are client/country specs. 3DES&MD5 signing is a bit outdated, but they must maintain compatibility with existing systems so they maintain the old signing scheme.
Feb
5
comment A SW system constructed with Microsoft CNG can be FIPS 140-2 Level 2 Compliant?
Thanks for the advice.
Feb
1
awarded  Commentator
Feb
1
comment A SW system constructed with Microsoft CNG can be FIPS 140-2 Level 2 Compliant?
Thanks, the "signature" scheme, MD5 and other design issues are out of our scope, as are demanded by the client and are mandatory. I know, they are "old" schemes, but they are enforced as official ("national") specs.
Nov
26
comment A SW system constructed with Microsoft CNG can be FIPS 140-2 Level 2 Compliant?
Thanks for the clarification! The solution we are thinking now is to have a SmartCard with the keys permanently attached to the PC in order to perform the cryptographic operations as they are on-line by nature. Having a SmartCard permanently attached to a reader plugged to the PC is not the preferable way for us but the budget constrains of the project force us to such kind of solutions.
Nov
26
accepted A SW system constructed with Microsoft CNG can be FIPS 140-2 Level 2 Compliant?
Sep
21
comment About performance of Smart card for performing 3DES in a MD5 hash
Smartcards can be used to transport keys (master keys), so master keys can be exported easily with the transport one(s). Optionally can perform cryptographic operations if they have criptographic chip, hence can be for storage only or for criptografic operations. Smartcards are the usual way to transport keys. Can fail, but we can not replace as the smartcard is written by the authority that generates the keys, we only use the keys generated. And yes, 3DES and MD5 are still used for low-security cryptography when data is not sensible.
Sep
16
comment About performance of Smart card for performing 3DES in a MD5 hash
Both MD5 and 3DES are requirement of our client. Nothing to do as they are the national standards used for the purpose of the project.
Jun
25
awarded  Scholar
Jun
25
accepted Smart card compatible with Schlumberger (Gemalto) Cryptoflex 16K and USB reader
Jun
25
comment Smart card compatible with Schlumberger (Gemalto) Cryptoflex 16K and USB reader
Your are right, we are working for the chilean government for a solution, not EFC, but similar one. We are looking new ST standards and new key exchange scheme using regular files instead of Smart cards are really simpler, so we are considering this approach. Thank you for the advice.
Jun
21
comment A SW system constructed with Microsoft CNG can be FIPS 140-2 Level 2 Compliant?
I don't know, Microsoft states it can be done, but no specifies if pure SW, SW + HW, only HW and CNG for calling the HSM... We have to define the requirements with our client.
Jun
21
comment About performance of Smart card for performing 3DES in a MD5 hash
Thanks for the advice. It's not clear with our client if the entire system must be Level 2, as they usually talk about HW (HSM...) and we (integrator) prefer to build a SW pure system, such in my previous question, so a SW system could not be required to be Level 2, client must decide.
Jun
21
comment A SW system constructed with Microsoft CNG can be FIPS 140-2 Level 2 Compliant?
I know. The FIPS 140-2 compliance question is more related to key storage.
Jun
21
asked Smart card compatible with Schlumberger (Gemalto) Cryptoflex 16K and USB reader
Jun
21
asked About performance of Smart card for performing 3DES in a MD5 hash
Jun
21
revised A SW system constructed with Microsoft CNG can be FIPS 140-2 Level 2 Compliant?
edited tags
Jun
21
comment A SW system constructed with Microsoft CNG can be FIPS 140-2 Level 2 Compliant?
Microsoft says: CNG was designed to be usable as a component in a FIPS level 2 validated system. msdn.microsoft.com/en-us/library/windows/desktop/…
Jun
21
comment A SW system constructed with Microsoft CNG can be FIPS 140-2 Level 2 Compliant?
Microsoft states that CNG can be used to build a Level 2 compliant system, but not specifies how nor if requires HW elements such as HSM. The key point is about key storage, if we need HSM to at least store keys or we can use CNG to store keys.
Jun
19
awarded  Student