POSTAL SECURITY DEVICE NON-PROPRIETARY SECURITY POLICY Version 9.0 This document may be reproduced or transmitted only in its entirety without revision. PSD Security Policy Contents Contents ............................................................................................................................................ 1 Figures ............................................................................................................................................... 1 1 INTRODUCTION ........................................................................................................................... 2 2 CRYPTOGRAPHIC MODULE SPECIFICATION ................................................................................... 2 3 SENSITIVE SECURITY PARAMETERS MANAGEMENT....................................................................... 7 4 PORTS AND INTERFACES ............................................................................................................ 11 5 ROLES, SERVICES AND AUTHENTICATION.................................................................................... 12 6 OPERATIONAL ENVIRONMENT ................................................................................................... 13 7 PHYSICAL SECURITY ................................................................................................................... 13 8 SELF-TESTS................................................................................................................................. 14 9 DESIGN ASSURANCE .................................................................................................................. 15 10 MITIGATION OF OTHER ATTACKS ............................................................................................ 15 11 APPENDIX A - Glossary............................................................................................................ 16 12 APPENDIX B – List of Changes ................................................................................................. 16 Figures TOC \t "Figure;1" \c "Figure" No table of figures entries found. Page 1/18 PSD Security Policy 1 INTRODUCTION This document forms a Cryptographic Module Security Policy for Neopost Postal Security Device under the terms of the FIPS 140-2 validation. This document contains a statement of the security rules under which the PSD operates. 2 CRYPTOGRAPHIC MODULE SPECIFICATION 2.1 PSD Overview The Neopost Postal Security Device (PSD) is a cryptographic module embedded within the postal franking machines. The PSD performs all franking machine’s cryptographic and postal security functions and protect the Critical Security Parameters (CSPs) and Postal Relevant Data from unauthorized access. The PSD (Figure 1) is a multi-chip embedded cryptographic module enclosed within a hard, opaque, plastic enclosure encapsulating the epoxy potted module which is wrapped in a tamper detection envelope with a tamper response mechanism. This enclosure constitutes the cryptographic module’s physical boundary. The PSD was designed to securely operate when voltage supplied to the module is between +5V and +17V and the environmental temperature is between -30°C and 84°C. Figure 1 – Neopost Postal Security Device Page 2/18 PSD Security Policy 2.2 PSD Configuration PSD (Cryptographic Module) Description Hardware P/N A0014227-B Firmware Version a22.17.01 a23.08.01 a28.02.01 a28.05 Version AES (Cert. #2565) YES YES YES YES A0018322A Version CMAC (Cert. #2566) YES YES YES YES A0018326A NIST Approved Security Functions Version ECDSA1 (Cert. #441) YES YES YES YES A0018325A Version HMAC (Cert. #1583) NO NO NO YES A0018327A Version HMAC (Cert. # 1603) YES YES YES NO A0019557 Version CVL (Cert. #92) YES YES YES YES A0018320A Version RNG (Cert. #1217) YES YES YES YES A0018328A Version RSA2 (Cert. #1314) YES YES YES YES A0018321A Version SHS3 (Cert. #2162) YES YES YES YES A0018324A Figure 2 – PSD Configuration Country (Postal Authority)/Specification Firmware Version USPS/ IBI_Lite a23.08.01 USPS/ IMI_2013 a28.02.01 UK Royal Mail a22.17.01 UK Royal Mail/EIB a28.05 TNT a23.08.01 a22.17.01 CPC a23.08.01 a22.17.01 DPAG a23.08.01 Figure 3 – PSD Firmware Version 1 non-compliant for ECDSA SigGen P192 2 non-compliant for RSA key lengths less than 2048-bit (less than 112 bits of encryption strength) 3 SHA-1 is non-compliant when used for hashing (e.g. used with RSA or ECDSA SigGen function) Page 3/18 PSD Security Policy 2.3 FIPS Security Level Compliance The PSD is designed to meet the overall requirements applicable for Level 3 of FIPS 140-2. Security Requirements Level Cryptographic Module Specification 3 Cryptographic Module Ports and Interfaces 3 Roles, Services and Authentication 3 Finite State Model 3 Physical Security 3 + EFP/EFT Operational Environment N/A Cryptographic Key Management 3 EMI/EMC 3 Self-Tests 3 Design Assurance 3 Mitigation of Other Attacks 3 Figure 4 – FIPS 140-2 Security Level 2.4 Security Industry Protocols The cryptographic module implements the TLS v1.04 protocol and uses only one cipher suite (TLS-DHE- RSA-WITH-AES-128-CBC-SHA). The TLS v1.0 protocol is composed of TLS Handshake protocol (used for mutual authentication and TLS pre-master secret establishment) and TLS Record protocol (used for application data confidentiality and integrity). 4 This protocol has not been reviewed or tested by the CAVP and CMVP Page 4/18 PSD Security Policy 2.5 Modes of Operation Approved Mode of Operation The PSD cryptographic module has only one mode of operation that uses both FIPS and non-FIPS approved algorithms. The details and use of FIPS Approved algorithms are presented below: Cert. Algorithm Usage Characteristics # Encryption/Decryption of:  CSPs for storage within the module AES (CBC) CBC (e/d; 128); 2565  Data exchanged using the TLS Record protocol Hashing algorithm used for:  Digital signature process: SHS (SHA-1) SHA-1 (BYTE-only) 2162 o RSA SigVer,  HMAC Generation Hashing algorithm used for:  Digital signature process: SHS (SHA-256) SHA-256 (BYTE-only) 2162 o ECDSA P224  HMAC Generation 1583 (Key Sizes Ranges Tested: KS