Page 97 connection, no other action] if the peer HTTPS client or a HTTPS server certificate is deemed invalid.” that supports mutual authentication. The third option (‘no other action’) is only applicable for HTTPS server that don’t support mutual authentication as there is no peer certificate to verify. list of trusted certification authorities “The NDcPP, Need to add 2 Suggested change can only be selected if AppNote nistp521 as well to be consistent implemented. or x509v3-ecdsa-sha2-nistp384 are 75 with FCS_SSHC_EXT.1.5. selected in FCS_SSHC_EXT.1.5.” Page 104 TLS_RSA_WITH_AES_128_CBC_SHA is Add ciphersuite to the mandatory 2 Section removed from mandatory ciphersuite but list. This like an oversight. added in C.2.1.5/.6 not added to the optional ciphersuite. to selection for FCS_TLSC_EXT.1.1 and Page FCS_TLSC_EXT.2.1 106/108 NDcPP, Recommended update to 1 FCS_CKM.4 (and its The cryptographic key destruction methods Section FCS_CKM.4: Evaluation Activities) has specified in FCS_CKM.4.1 does not cover 6.4.1.3, been rewritten for this all storage types (including SSDs) and are version, and is subject to in conflict with some FIPS 140-2 FCS_CKM.4.1 The TSF page ongoing discussions for requirements. If a FIPS 140-2 module goes destroy plaintext cryptographic 57 future versions of the cPP. into an error state with keys stored in keys in accordance with a specified The commenter is memory, the module is not permitted to cryptographic key destruction requested to review the perform any cryptographic operations while NDcPP method [selection: updated FCS_CKM.4 an error state (AS09.05) and this would SD language during the include requesting output from the RBG. For volatile memory the • public review and provide destruction shall be executed by feedback accordingly.
Page 97 connection, no other action] if the peer certificate is deemed invalid.” HTTPS client or a HTTPS server that supports mutual authentication. The third option (‘no other action’) is only applicable for HTTPS server that don’t support mutual authentication as there is no peer certificate to verify. NDcPP, AppNote 75 Page 104 “The list of trusted certification authorities can only be selected if or x509v3-ecdsa-sha2-nistp384 are selected in FCS_SSHC_EXT.1.5.” Need to add as well to be consistent with FCS_SSHC_EXT.1.5. 2 Suggested change implemented. Section C.2.1.5/.6 Page 106/108 TLS_RSA_WITH_AES_128_CBC_SHA is removed from mandatory ciphersuite but not added to the optional ciphersuite. Add ciphersuite to the mandatory list. This like an oversight. 2 added in to selection for FCS_TLSC_EXT.1.1 and FCS_TLSC_EXT.2.1 NDcPP, Section 6.4.1.3, page 57 NDcPP SD The cryptographic key destruction methods specified in FCS_CKM.4.1 does not cover all storage types (including SSDs) and are in conflict with some FIPS 140-2 requirements. If a FIPS 140-2 module goes into an error state with keys stored in memory, the module is not permitted to perform any cryptographic operations while an error state (AS09.05) and this would include requesting output from the RBG. Recommended update to FCS_CKM.4: FCS_CKM.4.1 The TSF destroy plaintext cryptographic keys in accordance with a specified cryptographic key destruction method [selection: • For volatile memory the destruction shall be executed by 1 FCS_CKM.4 (and its Evaluation Activities) has been rewritten for this version, and is subject to ongoing discussions for future versions of the cPP. The commenter is requested to review the updated FCS_CKM.4 language during the public review and provide feedback accordingly. nistp521
ConsolidatediTCcomments-NDcPPv2-20160721_v2.9.docx