On 04/15/2010 03:58 PM, Saran wrote: > I am trying to generate output responce vectors for "RSA Key Gen Known > Answer test" for our FIPS validation. > I presume this is for algorithm certs (not the known answer power on self tests). > The KeyGen RSA request file has input values like modulus, e, xp1, > xp2, xp, xq1, xq2, xq..., > > How do it compute the value of "p" and "q" from these??? > > Once I have the values of "p" and "q", I could use the source code in > NSS(rsa_keygen_from_primes) to generate RSA key. > > Can somebody pass on any informations, links or sample code ??? > If you are validating NSS, you can use mozilla/security/nss/cmd/fipstest/fipstest.c.
Unfortunately it doesn't include a test for RSA KeyGen. (I don't think NSS has an X9.31 key gen implementation). It wasn't necessary for our cert. http://csrc.nist.gov/groups/STM/cavp/documents/dss/rsaval.html#535 My guess is xp1, xp2, and xP are all inputs into the prime generator algorithm used by X9.31 which is used to produce "p" and "q". In practice I presume that they would be generated at random in an actual implementation. NSS generates 2 primes directly. bob > Your help is much appreciated. > > Thanks!!! >
-- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
