background image

 

Page 17 of 17 

© Copyright 2006 Lexmark International Inc. 

This document may be freely reproduced and distributed whole and intact including this Copyright Notice.

  

 

A

CRONYMS

 

AESSD   AES 

Session 

Daemon 

ANSI 

   American 

National 

Standards 

Institute 

API 

   Application 

Programming 

Interface 

CMVP 

   Cryptographic 

Module 

Validation 

Program 

CSE 

   Communications 

Security 

Establishment 

 

CSP 

   Critical 

Security 

Parameter 

DKMD   Decryption 

Key 

Management 

Daemon 

DLE 

   Downloaded 

Emulator 

Card 

EMC 

   Electromagnetic 

Compatibility 

 

EMI 

   Electromagnetic 

Interference 

FCC 

   Federal 

Communication 

Commission 

FIPS 

   Federal 

Information 

Processing 

Standard 

HMAC   (Keyed-) 

Hash 

MAC 

HTTP 

   Hypertext 

Transfer 

Protocol 

IP 

   Internet 

Protocol 

KAT 

   Known 

Answer 

Test 

 

LED 

   Light 

Emitting 

Diode 

LPC 

   Line 

Printer 

Control 

MAC 

   Message 

Authentication 

Code 

NIST 

   National 

Institute 

of 

Standards 

and 

Technology 

NVLAP   National 

Voluntary 

Laboratory Accreditation Program  

OS 

   Operating 

System 

PC 

   Personal 

Computer 

RAM 

   Random 

Access 

Memory 

RNG 

   Random 

Number 

Generator 

RSA 

   Rivest 

Shamir 

and 

Adleman 

SHA 

   Secure 

Hash 

Algorithm 

SKH 

   Session 

Key 

Header 

SNMP 

   Simple 

Network 

Management 

Protocol 

SP 

   Secure 

Platform 

TCP 

   Transmission 

Control 

Protocol 

VSS 

   Visual 

Source 

Safe 

Summary of Contents for 10G0149 - PrintCryption Card Encryption Module

Page 1: ...nc This document may be freely reproduced and distributed whole and intact including this Copyright Notice Lexmark PrintCryptionTM Firmware Version 1 3 1 FIPS 140 2 Non Proprietary Security Policy Lev...

Page 2: ...NTM 4 OVERVIEW 4 MODULE SPECIFICATION 4 MODULE INTERFACES 6 ROLES AND SERVICES 7 Crypto Officer Role 7 User Role 8 PHYSICAL SECURITY 8 OPERATIONAL ENVIRONMENT 9 CRYPTOGRAPHIC KEY MANAGEMENT 9 Access C...

Page 3: ...exmark PrintCryptionTM is referred to in this document as PrintCryption PrintCryption module cryptographic module firmware module or module References This document deals only with operations and capa...

Page 4: ...the confidential document to be printed This new level of printing security is ideal for industries that commonly handle sensitive or personal information such as financial institutions government ag...

Page 5: ...1 4 Finite State Model 1 5 Physical Security 1 6 Operational Environment N A 7 Cryptographic Key Management 1 8 EMI EMC 1 9 Self tests 1 10 Design Assurance 1 11 Mitigation of Other Attacks N A Table...

Page 6: ...e network port parallel port USB port paper exit port multipurpose feeder LED and LCD display Since all of the module s services are server processes the logical interfaces of the module are network p...

Page 7: ...Log File LED LCD Display Network Ethernet 10 100 Port USB Port Parallel Port Status Output Interface Not Applicable Power Plug Power Connector Power Interface Table 2 FIPS 140 2 Logical Interfaces Rol...

Page 8: ...o CSP Public Key request Users request for printers public key The module generates a key pair if needed Public Key Request PKR at network port 9150 X 509 certificate RSA public key Read Write Secure...

Page 9: ...15 RSA sign verify PKCS 1 certificate 73 74 75 76 77 and 171 SHS FIPS 180 2 certificate 350 351 352 353 354 and 515 TDES 2 key ECB mode encryption decryption FIPS 46 3 certificate 356 357 358 359 360...

Page 10: ...ey is generated internally is 1024 bits RSA key pair using PKCS 1 compliant key generation techniques FIPS approved PRNG X9 31 Appendix A 2 4 is used to seed the RSA key generation mechanism AES Sessi...

Page 11: ...ncrypt Decrypt pair wise consistency check If any of these self tests fail the module will output an error indicator and enter an error state Design Assurance Source code and associated documentation...

Page 12: ...he page Note This Page is needed for later use c Configure the printer onto the TCP IP network per installation requirements If the printer is behind a firewall it must allow IP ports 9150 and 9152 to...

Page 13: ...a menu settings page Compare these settings to those on the page printed in step 1 7 Place the Option Added label on the printer next to the printer model and serial number label Lexmark provides the...

Page 14: ...though outside the boundary of the module the User should be careful to use secured printing services as needed Uses can select the AES encryption key length block length and mode using the printer pr...

Page 15: ...distributed whole and intact including this Copyright Notice Figure 4 Configuring a Secure Port Users must choose the key size and block size approved in FIPS PUB 197 standard FIPS approved key and bl...

Page 16: ...rs to determine The Lexmark PrintCryption Card is installed The network path exists even through a firewall and when ping command does not work The proper IP ports 9150 and 9152 are open The printer i...

Page 17: ...EMI Electromagnetic Interference FCC Federal Communication Commission FIPS Federal Information Processing Standard HMAC Keyed Hash MAC HTTP Hypertext Transfer Protocol IP Internet Protocol KAT Known...

Reviews: