cryptoadm(1M) enhancement for FIPS-140 mode [PSARC/2009/347 FastTrack timeout 06/17/2009]

Scott Rotondo Scott.Rotondo at sun.com
Wed Jun 10 15:28:41 PDT 2009


>>
>> 4.3  Interfaces:
>>
>>   The following new options are added to cryptoadm(1M) sub-commands
>>       cryptoadm list fips-140
>>       cryptoadm enable fips-140
>>       cryptoadm disable fips-140

Very minor issue: People often refer informally to "FIPS mode" rather 
than the more cumbersome FIPS 140 or FIPS 140-2. Unless you expect other 
FIPS standards to apply to the crypto framework, maybe you could save 
users a little typing:

	cryptoadm list fips
	cryptoadm enable fips
	cryptoadm disable fips

I don't feel strongly about this; just a suggestion.

	Scott

-- 
Scott Rotondo
Principal Engineer, Solaris Security Technologies
President, Trusted Computing Group
Phone/FAX: +1 408 850 3655 (Internal x68278)



More information about the opensolaris-arc mailing list