Lexmark 10G0149 - PrintCryption Card Encryption Module Manual Download Page 4

 

Page 4 of 17 

© Copyright 2006 Lexmark International Inc. 

This document may be freely reproduced and distributed whole and intact including this Copyright Notice.

  

 

L

EXMARK 

P

RINT

C

RYPTION

TM

 

Overview 

The Lexmark PrintCryption

TM

 is an option for the Lexmark printers that enable 

the transfer and printing of encrypted print jobs. This new Lexmark technology 
offers a level of security that is the first of its kind in the printing industry. With 
the PrintCryption module installed, the printer is capable of decrypting print jobs 
encrypted with the AES (FIPS 197) algorithm. The Lexmark PrintCryption

TM

 

analyses the encrypted data stream, determines if the correct key was used to 
encrypt the data, decrypts the data and allows the confidential document to be 
printed. This new level of printing security is ideal for industries that commonly 
handle sensitive or personal information, such as financial institutions, 
government agencies, and healthcare organizations. 

 

Module Specification 

The PrintCryption

TM

 module (firmware version 1.3.1) is a firmware module 

composed of three binaries, and it is installed in Lexmark printers using a 
Downloaded Emulator Card (DLE), a serial interface PCB board that plugs into 
the printer. The DLE card is shown in Figure 1.   

 

 

Figure 1 - Optional Firmware Card 

Per FIPS PUB 140-2, the cryptographic module is classified as multi-chip 
standalone cryptographic module. The module meets overall level 1 FIPS 140-2 
requirements, as detailed in Table 1.  

Tested DLE Configurations (Option P/N15A1962): 

T630, T632, T634:   P/N 10G0149  
C760, C762:    

P/N 16N3204  

W820: 

 

  P/N 

19E0123 

C912: 

 

  P/N 

12N1253 

T640, T642, T644:   P/N 20G0740 
W840: 

 

  P/N 

25A0034 

Summary of Contents for 10G0149 - PrintCryption Card Encryption Module

Page 1: ...nc This document may be freely reproduced and distributed whole and intact including this Copyright Notice Lexmark PrintCryptionTM Firmware Version 1 3 1 FIPS 140 2 Non Proprietary Security Policy Lev...

Page 2: ...NTM 4 OVERVIEW 4 MODULE SPECIFICATION 4 MODULE INTERFACES 6 ROLES AND SERVICES 7 Crypto Officer Role 7 User Role 8 PHYSICAL SECURITY 8 OPERATIONAL ENVIRONMENT 9 CRYPTOGRAPHIC KEY MANAGEMENT 9 Access C...

Page 3: ...exmark PrintCryptionTM is referred to in this document as PrintCryption PrintCryption module cryptographic module firmware module or module References This document deals only with operations and capa...

Page 4: ...the confidential document to be printed This new level of printing security is ideal for industries that commonly handle sensitive or personal information such as financial institutions government ag...

Page 5: ...1 4 Finite State Model 1 5 Physical Security 1 6 Operational Environment N A 7 Cryptographic Key Management 1 8 EMI EMC 1 9 Self tests 1 10 Design Assurance 1 11 Mitigation of Other Attacks N A Table...

Page 6: ...e network port parallel port USB port paper exit port multipurpose feeder LED and LCD display Since all of the module s services are server processes the logical interfaces of the module are network p...

Page 7: ...Log File LED LCD Display Network Ethernet 10 100 Port USB Port Parallel Port Status Output Interface Not Applicable Power Plug Power Connector Power Interface Table 2 FIPS 140 2 Logical Interfaces Rol...

Page 8: ...o CSP Public Key request Users request for printers public key The module generates a key pair if needed Public Key Request PKR at network port 9150 X 509 certificate RSA public key Read Write Secure...

Page 9: ...15 RSA sign verify PKCS 1 certificate 73 74 75 76 77 and 171 SHS FIPS 180 2 certificate 350 351 352 353 354 and 515 TDES 2 key ECB mode encryption decryption FIPS 46 3 certificate 356 357 358 359 360...

Page 10: ...ey is generated internally is 1024 bits RSA key pair using PKCS 1 compliant key generation techniques FIPS approved PRNG X9 31 Appendix A 2 4 is used to seed the RSA key generation mechanism AES Sessi...

Page 11: ...ncrypt Decrypt pair wise consistency check If any of these self tests fail the module will output an error indicator and enter an error state Design Assurance Source code and associated documentation...

Page 12: ...he page Note This Page is needed for later use c Configure the printer onto the TCP IP network per installation requirements If the printer is behind a firewall it must allow IP ports 9150 and 9152 to...

Page 13: ...a menu settings page Compare these settings to those on the page printed in step 1 7 Place the Option Added label on the printer next to the printer model and serial number label Lexmark provides the...

Page 14: ...though outside the boundary of the module the User should be careful to use secured printing services as needed Uses can select the AES encryption key length block length and mode using the printer pr...

Page 15: ...distributed whole and intact including this Copyright Notice Figure 4 Configuring a Secure Port Users must choose the key size and block size approved in FIPS PUB 197 standard FIPS approved key and bl...

Page 16: ...rs to determine The Lexmark PrintCryption Card is installed The network path exists even through a firewall and when ping command does not work The proper IP ports 9150 and 9152 are open The printer i...

Page 17: ...EMI Electromagnetic Interference FCC Federal Communication Commission FIPS Federal Information Processing Standard HMAC Keyed Hash MAC HTTP Hypertext Transfer Protocol IP Internet Protocol KAT Known...

Reviews: