Hlola isitifiketi se-CMVP ngemva kwesimangalo se-FIPS se-VPN

Amakhasi omthengisi athi FIPS iqinisekisiwe awabona ubufakazi ongabufaka efayeleni. Ubufakazi yinombolo yesitifiketi, igama lemojuli, inguqulo eqinisekisiwe kanye nemibandela yokusebenza enamathiselwe kuyo, futhi leyo kufanele ihambisane nokwakhiwa okuwusebenzisayo. I-NIST CMVP FAQ icacile ngomehluko phakathi komkhiqizo othi uhambisana nemojuli eyaqinisekiswa. Yenza izinyathelo ezine ezingezansi ngokulandelana, futhi gcina irekhodi kanye nokwethulwa.

Isinyathelo 1: thola inombolo yesitifiketi, hhayi ibheji

Cela umthengisi inombolo yesitifiketi se-CMVP ehlanganisa imojuli ye-cryptographic kumkhiqizo ohlela ukuwusebenzisa. Inombolo yesitifiketi iyinto ethile, ehlolwayo, kuyilapho ibheji kuwukukhangisa. Uma impendulo ichaza i-algorithm esikhundleni semojuli, leyo mpendulo iphendule omunye umbuzo. Cela inombolo futhi esikhundleni sokwamukela i-PDF yebheji. Irekhodi elingemva kwenombolo yilokho umcwaningi angakulandela.

Bese ufuna leyo nombolo ekusesheni okusemthethweni kwemojuli eziqinisekisiwe futhi ufunde irekhodi, hhayi isifinyezo salo. Irekhodi lisho umthengisi, imojuli, inguqulo eqinisekisiwe kanye nesimo, futhi lixhumanisa idokhumenti yenqubomgomo yezokuphepha echaza ukuthi imojuli kufanele isebenze kanjani.

Bhala lezo zinkambu ezinhlanu, ngoba isinyathelo esilandelayo siziqhathanisa nokwakhiwa. Ikholomu eyodwa kuspreadsheet yanele.

Isinyathelo 2: hlanganisa inguqulo yemojuli nokwakhiwa

Inguqulo yeklayenti le-VPN nenguqulo yemojuli efakiwe akuvamile ukuthi zabelane ngenombolo eyodwa, futhi lokho kuvamile. Okubalulekile ukuthi inguqulo yemojuli ngaphakathi kokwakhiwa kwakho iyavela yini erekhodini eliqinisekisiwe. Ukubuyekezwa kungashintsha imojuli ngaphandle kokushintsha igama lomkhiqizo, lokho okususa ngokuthula ukwethulwa ngaphandle kwesimiso esiqinisekisiwe.

Buza ukuthi iyiphi ingxenye esebenzisa imojuli nokuthi imodi evunyelwe ikhethwa kanjani ekusethweni okusekelwayo. Ukwakhiwa okungasebenza kumodi engavunyelwe akubona ubufakazi obufanayo nokwakhiwa okusethwe kwemodi evunyelwe.

Funda kusukela kokwakhiwa kwasekhaya, ukuze ukuqhathanisa kusebenzise i-artefact hhayi ikhasi lokulanda. Imiyalo engezansi iphrinta khona lokho.

openssl version -a
openssl list -providers -verbose
cat /proc/sys/crypto/fips_enabled

Uma imojuli ibika inguqulo ehlukile kunesitifiketi, isimangalo sisheshile futhi irekhodi lidinga ukubuyekezwa ngaphambi kokuthi noma ubani asayine noma yini.

Isinyathelo 3: funda imibandela yokusebenza

Isitifiketi sithwala imibandela echaza indawo ehlanganiswa ukuqinisekiswa. Leyo mibandela ingasho ipulatifomu, ukusetha, osayizi bokhiye abavunyelwe kanye nezinsizakalo okufanele zikhawulwe. Ukufakwa okuvamile okungazinaki kuwukwethulwa ngaphandle komngcele oqinisekisiwe, ngisho noma i-binary ifana. Yingakho idokhumenti yenqubomgomo yezokuphepha ibaluleke njengenombolo yesitifiketi.

Gcina isiqondiso somthengisi eduze kwesitifiketi, ngoba sichaza ukuthi iziphi izilungiselelo ezikhetha imodi evunyelwe futhi iziphi ezikhipha umkhiqizo ngaphandle kwayo.

Uma imibandela ingenakugcwaliseka endaweni yakho, isitatimende esithembekile ukuthi lokhu kwethulwa kungaphandle kwesimiso esiqinisekisiwe. Ukusho umbandela ongenakugcwaliseka kwenza leso sitatimende sibe yinto iqembu elingayilungisa noma elingayamukela.

Isinyathelo 4: qinisekisa isimo sanamuhla

Irekhodi le-CMVP linesimo, futhi isimo asihlali njalo. I-FAQ ye-NIST ichaza izinsuku zenguquko ye-FIPS 140-2 ngo-2026, ngemva kwalokho kusala kuphela ukuqinisekiswa kwe-FIPS 140-3 ohlwini olusebenzayo. Isitifiketi esasisebenza ngesikhathi ukuthengwa kugunyazwa namuhla singaba ngesomlando.

Esomlando nesichithiwe yizimo ezihlukene, futhi ngasinye sinencazelo yaso ekuthengeni. Hlola irekhodi elibukhoma hhayi isithombe sesikrini esivela kufolda yephrojekthi, futhi bhala usuku oluhlole ngalo.

Bese ubuza umnikazi wokuhambisana noma wokuthenga ukuthi yisiphi isimo esamukelwa yisidingo sabo, ngoba leso yisinqumo senqubomgomo hhayi ukutholakala kwezobuchwepheshe. Bhala impendulo inosuku.

Hlola irekhodi uma uqhathanisa nokwethulwa

Qhathanisa amanani amane aqoqiwe: inombolo yesitifiketi, inguqulo yemojuli evela kokwakhiwa, imibandela yokusebenza esebenzayo kanye nesimo samanje. Noma yikuphi ukungafani kuwukutholakala, futhi lokho kutholakala kufanele kube serekhodini lokwethulwa hhayi kuslayidi.

Gcina ubufakazi kanye nokwakhiwa, kuhlanganise nosuku kanye nomuntu ohlolile. Ifolda eyodwa ngokukhishwa ngakunye yanele.

date -u +%FT%TZ
openssl version -a | head -3
cat /proc/sys/crypto/fips_enabled

Gcina isimangalo ngaphakathi komngcele waso futhi. Ukuqinisekiswa kwemojuli akusho lutho mayelana nokuphathwa kweprotocol ye-VPN, izinqumo zayo zokugunyaza noma inqubomgomo yayo yokuloga. Kubufakazi obuthile mayelana nengxenye eyodwa ye-cryptographic echaziwe, futhi ukuyiphatha njengephuzu lomkhiqizo yiyo indlela ifayela lokuhambisana eligcina ngokuchaza khona into okungekho muntu oyethulile.