<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<!-- saved from url=(0014)about:internet -->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <meta http-equiv="Content-Style-Type" content="text/css" />
    <meta name="GENERATOR" content="Quadralay WebWorks AutoMap 2003 Platinum Edition Client for FrameMaker 8.6.6597.0" />
    <meta name="TEMPLATEBASE" content="emwebh8-1-17" />
    <meta name="LASTUPDATED" content="08/01/13 14:47:54" />
    <title>Information About FIPS Self-Tests </title>
    <!-- Copyright 2010-2013, Cisco Systems, Inc. All rights reserved. -->

    <link rel="StyleSheet" href="document.css" type="text/css" />
    <link rel="StyleSheet" href="catalog.css" type="text/css" />


<script> 
    var is_chrome = navigator.userAgent.toLowerCase().indexOf('chrome') > -1; 
   
    if(is_chrome){document.domain=document.domain}
   </script>
    <script type="text/javascript" language="JavaScript1.2" src="expand.js"></script>
    <script type="text/javascript" language="JavaScript1.2" src="page.js"></script>

    <script type="text/javascript" language="JavaScript1.2">
     <!--
      function  WWNoOp() {}
      function  WWNoValue() { return ""; }

      var  VarDropDown;

      if (typeof(HTMLHelp_Object) != "undefined")
      {
        VarDropDown = new WWDropDown_Object();
      }
      else
      {
        VarDropDown = new Object();
        VarDropDown.fAnchorOpen  = WWNoOp;
        VarDropDown.fAnchorClose = WWNoOp;
        VarDropDown.fDIVOpen  = WWNoOp;
        VarDropDown.fDIVClose = WWNoOp;
      }
     // -->
    </script>

  
<SCRIPT language="javascript">
<!--
  self.document.write("<link href='"+top.relPath+"shared/style.css' rel='stylesheet' type='text/css'>");
  myid=1696;
  self.document.write("<script type='text/javascript' language='JavaScript' src='"+top.relPath+"shared/con_utils.js'></scr"+"ipt>");
//-->
</SCRIPT>
</head>

  <body onload="highlightSearchTerms();" bgcolor="#ffffff">

    
    <blockquote>
    <a name="top"></a>

    
    


<a name="wp1056837"> </a><h1 class="pTitle">
Information About FIPS Self-Tests

</h1>
<a name="wp1073258"> </a><p class="pBody">
A cryptographic module must perform power-up self-tests and conditional self-tests to ensure that it is 
functional.

</p>
<a name="wp1073259"> </a><p class="pBodyAutonumNoRule">
<strong>Note	&nbsp;&nbsp;&nbsp;</strong> FIPS power-up self-tests automatically run when FIPS mode is enabled by entering the <span style="font-weight: bold">fips mode enable 
</span>command. A switch is in FIPS mode only after all self-tests are successfully completed. If any of the 
self-tests fail, then the switch is rebooted.

</p>
<a name="wp1073260"> </a><p class="pBody">
Power-up self-tests run immediately after FIPS mode is enabled. A cryptographic algorithm test using a 
known answer must be run for all cryptographic functions for each FIPS 140-2-approved cryptographic 
algorithm implemented on the Cisco MDS 9000 Family.

</p>
<a name="wp1073261"> </a><p class="pBody">
Using a known-answer test (KAT), a cryptographic algorithm is run on data for which the correct output 
is already known, and then the calculated output is compared to the previously generated output. If the 
calculated output does not equal the known answer, the known-answer test fails.

</p>
<a name="wp1073262"> </a><p class="pBody">
Conditional self-tests must be run when an applicable security function or operation is invoked. Unlike 
the power-up self-tests, conditional self-tests are executed each time their associated function is 
accessed.

</p>
<a name="wp1073263"> </a><p class="pBody">
Conditional self-tests include the following:

</p>
<div class="pSmartList1"><ul class="pSmartList1">
<a name="wp1073264"> </a><li class="pSmartList1">Pair-wise consistency test&#8212;This test is run when a public-private key-pair is generated.
</li>
<a name="wp1073265"> </a><li class="pSmartList1">Continuous random number generator test&#8212;This test is run when a random number is generated.
</li>
</ul></div>
<a name="wp1073266"> </a><p class="pBody">
Both of these tests automatically run when a switch is in FIPS mode.

</p>
<hr /><br><p class="pBody">Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.</p> 

    </blockquote>

  </body>
</html>
