Help Implementing FIPS Level 1 Requirements #4

[jphung101]

I was looking at the Level 1 Specific Requirements in README_FIPS.md and was stuck on how #4: Run integrity selftest at power on for SW component would be implemented. I was wondering if there were any good resources on implementing this? (Would it be just as simple as flashing a UEFI on my board, what I/O and components should be checked in the self-test, etc) Thanks a lot!

[rcao8]

In the Intel Cryptography Library, integrity self-test is an important step to ensure that the cryptographic module has not been tampered with or damaged at startup. This self-test is often used to comply with the requirements of the FIPS (Federal Information Processing Standards) 140 series1.

When implementing this self-test, a specific API function is usually called at system startup to perform the self-test. For example, the Intel® Cryptography Primitives Library provides the fips_selftest_ippcp API to run the self-test1. The user's application should call these self-test functions before using the algorithm for the first time. see Example