ANSI X9 TG 19-1-1999 pdf download TG-19, Part l: Modes of Operation V alidation System for the Triple Data Encryption Algorithm (TMOVS): Requirements and Procedures
Scope
This publication specifies the various tests required to validate implementations under test (IUTs)for conformance to the Triple DES algorithm. When applied to IUTs of the Triple DESalgorithm, the Modes of Operation Validation System (TMOVS) provides conformance testingfor the various components of the algorithr, as well as testing for apparent operational errors.
The TMOVS is composed of two types of validation tests, the Known Answer tests and theModes tests. Both of these are based on validation tests described in SP500-20, Validating theCorrectness ofHardware lplementations of the NBS Data Encryption Standard. SPTT expandson this by specifying how to validate implementations of the Triple DES algorithm in software.irmware. hardware, or any combination thereof. The Known Answer tests and Modes tests arebased on the standard DES test set and the Monte-Carlo tests respectively.
To perform the Known Answer tests, the TMOVS supplies known values to the IUT. The IUTthen processes the input through the implemented algorithm, and the results are compared toexpected values. When applied to IUTs of the TDEA, the Known Answer tests verify that theIUT correctly implements the components of the algorithm e.g., S boxes, permutation tables,….
Since the test set used for the Known Answer tests is public knowledge, another type ofvalidation test has been designed to use pseudo-random data This test is the Modes test (alsoknown as the Monte Carlo test). The Modes test verifies that the IUT has not been designed justto pass the Known Answer tests. A successful series of Modes tests gives some assurance that ananomalous combination of inputs does not exist that would cause the test to end abnormally forreasons not directly related to the implementation of the algorithm, An additjonal purpose of theModes test is to verify that no undesirable condition within the IUT will cause the key or plain-text to be cxposed due to an implementation or operational error. The Modes test is not areliability test, but merely checks for the presence of an apparent operational error.
2 Conformance
The successful completion of the tests contained within the Triple DES Modes of Operation Validation System is required to claim conformance to ANSI X9.52- 1998, Triple Data Encryption Algorithm Modes of Operation.