Lexmark 10G0149 - PrintCryption Card Encryption... User manual

This document may be freely reproduced and distributed whole and intact including this Copyright Notice.

Lexmark PrintCryptionTM

(Firmware Version 1.3.1)

FIPS 140-2 Non-Proprietary

Security Policy

Level 1 Validation

Version 0.95

April 2007

Page 2 of 17

This document may be freely reproduced and distributed whole and intact including this Copyright Notice.

Table of Contents

INTRODUCTION......................................................................................................................... 3

PURPOSE....................................................................................................................................... 3

REFERENCES................................................................................................................................. 3

DOCUMENT ORGANIZATION ......................................................................................................... 3

LEXMARK PRINTCRYPTIONTM............................................................................................. 4

OVERVIEW.................................................................................................................................... 4

MODULE SPECIFICATION .............................................................................................................. 4

MODULE INTERFACES................................................................................................................... 6

ROLES AND SERVICES................................................................................................................... 7

Crypto Officer Role .................................................................................................................. 7

User Role.................................................................................................................................. 8

PHYSICAL SECURITY .................................................................................................................... 8

OPERATIONAL ENVIRONMENT ...................................................................................................... 9

CRYPTOGRAPHIC KEY MANAGEMENT .......................................................................................... 9

Access Control Policy ............................................................................................................ 10

Key Generation ...................................................................................................................... 10

Key Storage ............................................................................................................................ 10

Key Entry and Output............................................................................................................. 10

Key Zerorization..................................................................................................................... 10

SELF-TESTS ................................................................................................................................ 10

DESIGN ASSURANCE................................................................................................................... 11

MITIGATION OF OTHER ATTACKS............................................................................................... 11

OPERATION IN FIPS MODE.................................................................................................. 12

INITIAL SETUP ............................................................................................................................ 12

CRYPTO OFFICER GUIDANCE...................................................................................................... 13

USER GUIDANCE......................................................................................................................... 14

ACRONYMS............................................................................................................................... 17

Page 3 of 17

This document may be freely reproduced and distributed whole and intact including this Copyright Notice.

Introduction

Purpose

This is a non-proprietary Cryptographic Module Security Policy for the Lexmark

PrintCryptionTM from Lexmark International Inc. This Security Policy describes

how the Lexmark PrintCryptionTM meets the security requirements of FIPS 140-2

and how to run the module in a secure FIPS 140-2 mode. This policy was

prepared as part of the Level 1 FIPS 140-2 validation of the module.

FIPS 140-2 (Federal Information Processing Standards Publication 140-2 —

Security Requirements for Cryptographic Modules) details the U.S. Government

requirements for cryptographic modules. More information about the FIPS 140-2

standard and validation program is available on the National Institute of Standards

and Technology (NIST) Cryptographic Module Validation Program (CMVP)

website at http://csrc.nist.gov/cryptval/.

The Lexmark PrintCryptionTM is referred to in this document as PrintCryption,

PrintCryption module, cryptographic module, firmware module, or module.

References

This document deals only with operations and capabilities of the module in the

technical terms of a FIPS 140-2 cryptographic module security policy. More

information is available on the module from the following sources:

•The Lexmark International website (http://www.lexmark.com) contains

information on the full line of products from Lexmark International.

•The CMVP website (http://csrc.nist.gov/cryptval/) contains contact

information for answers to technical or sales-related questions for the module.

Document Organization

The Security Policy document is one document in a FIPS 140-2 Submission

Package. In addition to this document, the Submission Package contains:

Vendor Evidence document

Finite State Machine

Other supporting documentation as additional references

With the exception of this Non-Proprietary Security Policy, the FIPS 140-2

Validation Documentation is proprietary to Lexmark and is releasable only under

appropriate non-disclosure agreements. For access to these documents, please

contact Lexmark International.

Page 4 of 17

This document may be freely reproduced and distributed whole and intact including this Copyright Notice.

LEXMARK PRINTCRYPTIONTM

Overview

The Lexmark PrintCryptionTM is an option for the Lexmark printers that enable

the transfer and printing of encrypted print jobs. This new Lexmark technology

offers a level of security that is the first of its kind in the printing industry. With

the PrintCryption module installed, the printer is capable of decrypting print jobs

encrypted with the AES (FIPS 197) algorithm. The Lexmark PrintCryptionTM

analyses the encrypted data stream, determines if the correct key was used to

encrypt the data, decrypts the data and allows the confidential document to be

printed. This new level of printing security is ideal for industries that commonly

handle sensitive or personal information, such as financial institutions,

government agencies, and healthcare organizations.

Module Specification

The PrintCryptionTM module (firmware version 1.3.1) is a firmware module

composed of three binaries, and it is installed in Lexmark printers using a

Downloaded Emulator Card (DLE), a serial interface PCB board that plugs into

the printer. The DLE card is shown in Figure 1.

Figure 1 - Optional Firmware Card

Per FIPS PUB 140-2, the cryptographic module is classified as multi-chip

standalone cryptographic module. The module meets overall level 1 FIPS 140-2

requirements, as detailed in Table 1.

Tested DLE Configurations (Option P/N15A1962):

T630, T632, T634: P/N 10G0149

C760, C762: P/N 16N3204

W820: P/N 19E0123

C912: P/N 12N1253

T640, T642, T644: P/N 20G0740

W840: P/N 25A0034

Page 5 of 17

This document may be freely reproduced and distributed whole and intact including this Copyright Notice.

C920: P/N 13N1343

C534: P/N 36B0147

X644e, X646e, X646dte: P/N 22G0352

X850e, X852e, X854e: P/N 15R0093

C772: P/N 20B3204

C782: P/N 10Z0403

C935: P/N 21Z0366

X945e: P/N 21Z0370

Operating System: Lexmark proprietary ver. 2.4 based on Linux

Section Section Title Level

1 Cryptographic Module Specification 1

2 Cryptographic Module Ports and Interfaces 1

3 Roles, Services, and Authentication 1

4 Finite State Model 1

5 Physical Security 1

6 Operational Environment N/A

7 Cryptographic Key Management 1

8 EMI/EMC 1

9 Self-tests 1

10 Design Assurance 1

11 Mitigation of Other Attacks N/A

Table 1 – Security Level per FIPS 140-2 Section

Logically, the cryptographic boundary is composed of three binaries and is

evaluated for use on Lexmark printers that are running Linux operating system.

Once the PrintCryption firmware is installed in the printer, the printer must use

this firmware. The cryptographic module cannot be bypassed. Functionality is

then controlled by the PrintCryption firmware.

Figure 2 - Logical Cryptographic Boundary

Applications

PrintCryption

Firmware

Cryptographic BoundaryPlaintext

Ciphertext

Internal Data

Page 6 of 17

This document may be freely reproduced and distributed whole and intact including this Copyright Notice.

The PrintCryption module is evaluated for running on number of Lexmark

printers including mono-color printers (T630, T632, T634, W820, T640, T642,

T644, W840), Color printers (C534, C760, C762, C912, C920, C772, C782,

C935) and MFP printers (X644e, X646e, X646dte, X850e, X852e, X854e,

X945e). The module’s physical cryptographic boundary is the metal and plastic

enclosure of the printer.

Figure 3 - Physical Cryptographic Boundary

Module Interfaces

The cryptographic module’s physical ports are composed of the physical ports

provided by the hardware platforms listed above. These printer ports include the

network port, parallel port, USB port, paper exit port, multipurpose feeder, LED,

and LCD display.

Since all of the module’s services are server processes, the logical interfaces of

the module are network port and API calls, which provide the only means of

accessing the module’s services. Data inputs are service requests on the TCP

ports. Control inputs are also data at TCP/IP port, however they are logically

distinct from Data input and controls how the function is executed. The data

output from the module includes X.509 certificate and deciphered data, which exit

through the network port and an internal API, respectively. The status outputs of

the module are sent via network and stored in log file.

All of these physical ports are separated into logical interfaces defined by FIPS

140-2, as described in the following table.

CPU

FLASH Volatile

Memory

Custom

ASIC I/O Port

Option Slot

Engine PCI BUS

stem BUS

Cryptographic Boundary

Page 7 of 17

This document may be freely reproduced and distributed whole and intact including this Copyright Notice.

Logical Interface of the Module Module Physical Port FIPS 140-2 Logical Interface

Network Port Network (Ethernet 10/100) Port

USB Port

Parallel Port

Data Input Interface

Network Port

Internal API

Network (Ethernet 10/100) Port

Paper Exit Port

Data Output Interface

Network Port Operator Panel

Network (Ethernet 10/100) Port

USB Port

Parallel Port

Paper Exit Port

Multipurpose/envelope Feeder

Power Switch

Circuit Breaker Switch

Control Input Interface

Network Port

Log File

LED

LCD Display

Network (Ethernet 10/100) Port

USB Port

Parallel Port.

Status Output Interface

Not Applicable Power Plug

Power Connector

Power Interface

Table 2 – FIPS 140-2 Logical Interfaces

Roles and Services

The module supports two roles, a Crypto Officer role and a User role, and an

operator on the module must assume one of the roles. Descriptions and

responsibilities for the two roles are described below.

Crypto Officer Role

The Crypto Officer installs and uninstalls the PrintCryption. The Crypto Officer is

also responsible for monitoring the printer’s configuration and operational status

via network port.

Service Description Input Output CSP Type of Access

to CSP

Install Assemble the

printer(s); Install

PrintCryptionTM

firmware card; Install

printer driver on host

Command Result of

installation

None --

Page 8 of 17

This document may be freely reproduced and distributed whole and intact including this Copyright Notice.

Service Description Input Output CSP Type of Access

to CSP

Uninstall Uninstall the firmware Command Uninstalled

module

None --

Monitor Configure of the

module

Command Module setting None --

Run Self-

Test

Perform the self-test

on demand

Command Status output Integrity Check

Key

Read

Show Status Call a show status

from the printer status

menu (HTTP) which

has an LPC log page

Command Status output None --

Table 3 – Crypto Officer Services, Descriptions, CSPs

User Role

Users utilize the cryptographic functionalities of the PrintCryption, and they

communicate with the module via network port only.

Service descriptions and inputs/outputs are listed in the following table:

Service Role Input Output CSP Type of Access

to CSP

Public Key

request

Users request for

printers public key.

The module generates

a key pair if needed

Public Key

Request (PKR)

at network port

9150.

X.509

certificate

RSA public key Read/Write

Secure

Printing

AES encrypted

printing program;

Decrypts and prints

the print job data

using the supplied

AES Session key

Encrypted

print job at

TCP/IP port

9152.

Status output AES session key Read/Write

Table 4 – User Services, Descriptions, Inputs and Outputs

Physical Security

In FIPS terminology, the firmware module is defined as a multi-chip standalone

cryptographic module. The module runs on Lexmark printers listed in Module

Specification section. The printers are made of all production-grade components

and are enclosed in a strong plastic and steel case, which surrounds all of the

module’s internal components, including all hardware and firmware.

While purely a firmware module, the FIPS 140-2 evaluated platforms must have

been tested for and meet applicable FCC EMI and EMC requirements for business

use as defined by 47 Code of Federal Regulations, Part15, Subpart B.

Page 9 of 17

This document may be freely reproduced and distributed whole and intact including this Copyright Notice.

Operational Environment

The operational environment is non-modifiable and thus not applicable for this

firmware module. The PrintCryption module runs on the Linux OS, and

configured for single-user mode by default. The operating system is used as an

embedded OS within the Lexmark printers, and there is no direct access to the OS

provided.

Cryptographic Key Management

The module implements the following FIPS-approved algorithms.

•AES ECB, CBC mode decryption – FIPS 197 (certificate #273, #274,

#275, #276, #277, and #452)

•Deterministic Random Number Generator (RNG) – Appendix A.2.4 of

ANSI X9.31 (certificate #100, #101, #102, #103, #104, and #237)

•HMAC – FIPS 198 (certificate #89, #90, #91, #92, #93, and #215)

•RSA (sign/verify) – PKCS#1 (certificate #73, #74, #75, #76, #77, and

#171)

•SHS– FIPS 180-2 (certificate #350, #351, #352, #353, #354, and #515)

•TDES 2 key ECB mode encryption/decryption – FIPS 46-3 (certificate

#356, #357, #358, #359, #360, and #470) (Note: The FIPS approved

X9.31 Appendix A.2.4 PRNG utilizes 2 key TDES algorithm).

Additionally, the module utilizes the following non-FIPS-approved algorithm

implementation:

•RSA Key Wrapping (PKCS #1): Key establishment method uses a 1024-

bit key length providing 80-bits of security.

The module supports the following critical security parameters:

Key or CSP Key type Generation Storage Use

AES Session Key 128, 192, 256

bits AES key

Externally generated. Imported in

encrypted form (RSA key transport)

Held in volatile

memory in plaintext.

Zerorized after the

session is closed or

on reboot.

Decrypts input data

for printing

RSA Public Key 1024 bit RSA

public key (80-

bits of

security)

Internally generated using PKCS#1

key generation mechanism

Stored on flash in

plaintext. Zerorized

by overwriting the

flash image.

Key transport

Page 10 of 17

This document may be freely reproduced and distributed whole and intact including this Copyright Notice.

RSA Private Key 1024 bit RSA

private key

(80-bits of

security)

Internally generated using PKCS#1

key generation mechanism

Stored on flash in

plaintext. Zerorized

by overwriting the

flash image.

Key transport

Integrity Check Keys HMAC keys Externally generated, hard coded in

the module

Stored on flash in

plaintext. Zerorized

by overwriting the

flash image.

Firmware Integrity

test

X9.31 PRNG 2-key TDES

keys, 8 bytes

of seed value

Internally generated Held in volatile

memory only in

plaintext. Zerorized

on reboot.

RNG

Table 5 – Listing of Key and Critical Security Parameters

Access Control Policy

User functionalities have read/write access to the AES Session Key and RSA

public key. AES Session key is used to decrypt the data for printing. RSA public

key is used for AES Session key transport. Integrity Check Keys can be read by

Crypto-Officer “Run Self-Test” service.

Key Generation

The module key is generated internally is 1024 bits RSA key pair using PKCS#1-

compliant key generation techniques. FIPS-approved PRNG X9.31 Appendix

A.2.4 is used to seed the RSA key generation mechanism. AES Session Key is

generated outside of the module and imported via RSA key transport.

Key Storage

The AES Session Key is held in volatile memory only in plaintext. The RSA

public key is stored in flash memory in an X.509 certificate in plaintext, and the

RSA private key is stored flash memory in plaintext.

Key Entry and Output

All keys that are entered into (AES key) or output from (RSA certificate) the

module are electronically entered or output. AES Session Key is enters into the

module transported (encrypted) by RSA public key.

Key Zerorization

AES Session key is an ephemeral key which is zerorized after the connection is

closed or by rebooting the module. The module provides no service to erase or

discard the RSA key pair. The key pair is erased by overwriting the flash image

with a new image.

Self-Tests

The PrintCryption module runs power-up and conditional self-tests to verify that

it is functioning properly. Power-up self-tests are performed during startup of the

module, and conditional self-tests are executed whenever specific conditions are

met.

Other manuals for 10G0149 - PrintCryption Card Encryption...

This manual suits for next models

Table of contents

Other Lexmark Printer Accessories manuals

Lexmark

Lexmark N8050 User manual

Lexmark

Lexmark X644E - With Modem Taa/gov User manual

Lexmark

Lexmark ImageQuick SIMM User manual

Lexmark

Lexmark C792 Family Service manual

Lexmark

Lexmark ImageQuick User manual

Lexmark

Lexmark 1361760 User manual

Lexmark

Lexmark T656 Series User manual

Lexmark

Lexmark 250d - E B/W Laser Printer User manual

Lexmark

Lexmark 4600MFP User manual

Lexmark

Lexmark T656 Series User manual

Lexmark

Lexmark 10G0100 - T 630 B/W Laser Printer User manual

Lexmark

Lexmark T656 Series User manual

Lexmark

Lexmark T650 User manual

Lexmark

Lexmark 10G0149 - PrintCryption Card Encryption... User manual

Lexmark

Lexmark T656 Series User manual

Lexmark

Lexmark MX6500e 6500e User manual

Lexmark

Lexmark X630 Operating and maintenance instructions

Lexmark

Lexmark 5500 MFP User manual

Lexmark

Lexmark CS410 series Use and care manual

Lexmark

Lexmark 520-sheet Configuration guide

Lexmark

Lexmark E260 Series User manual

Lexmark

Lexmark C 752 User manual

Lexmark

Lexmark 10N0026 User manual

Lexmark

Lexmark 20T3600 - T 620 B/W Laser Printer User manual

Popular Printer Accessories manuals by other brands

Star Micronics

Star Micronics TSP800 Series install guide

REA

REA JET HR pro 2K user manual

HP Laserjet,Color Laserjet 4si user guide

oliser

oliser MS 45 instructions

Roland

Roland DU2-64 Supplementary manual

Xerox

Xerox EFI EXP6000 Specification sheet

Canon

Canon Finisher-T1 Service manual

Sharp

Sharp FO-1MK Service manual

Labelmate

Labelmate PM-300 user manual

Epson

Epson T6248 Product information sheet

Epson

Epson OT-BZ20 user manual

Canon

Canon TonerRobot EP-27 instruction manual

Ricoh

Ricoh LCIT RT5100 Field service manual

GBC

GBC 16 Series user guide

Canon

Canon INNER 2-WAY TRAY-E1 INSTALLATION PROCEDURE

Develop

Develop SD-509 installation manual

Kyocera

Kyocera KM-6230 Instruction handbook

Triumph Adler

Triumph Adler DF-710 Instruction handbook