Download BSI TR-ESOR C.1

BSI TR-ESOR-C.1: Functional Conformity Test Specification
5.4.16 M.3-16 – Time stamps shall be verified prior to renewal
Identifier
M.3-16
Requirement
M3:A4.7-2
M3:A4.7-3
Test Purpose
Check, whether a complete Archive Time Stamp renewal verifies the integrity and authenticity of the Archive Time Stamps to be renewed and whether the hash
values of these Archive Time Stamps are included in the new Archive Time Stamp.
Configuration
CONFIG_Common
Pre-test conditions
Step
•
Submit several archive objects to the storage and configure the automatic Archive Time Stamping in such a way, that several Archive Time Stamps will
be generated in parallel and they are not “covered” by a superior Archive Time Stamp
•
If required, perform identification and authentication
Test sequence
Expected Results
1.
Request the ERS of these archive objects which are
The hash value of each of the parallel Archive Time Stamps is
covered by the mentioned parallel Archive Time Stamps. documented in one ERS.
2.
Start the complete Archive Time Stamp renewal process. The complete Archive Time Stamp renewal process was started
successfully.
3.
Observe the requests of the ArchiSig module to the
Cryptographic Module.
ArchiSig will request verification of the very last Archive Time
Stamp signature.
4.
Emulation: the Cryptographic Module sends a negative
response.
Sending of negative response was performed successfully.
5.
Check the log files of the ArchiSig-Module or observe
otherwise the reaction of ArchiSig.
ArchiSig shall mention the failed verification of the qualified time
stamp and stop the complete Archive Time Stamp.
6.
Request an Evidence Records for one known AOID.
Requesting of an Evidence Records was performed successfully.
7.
Check the Evidence Records for information about the
The ERS should contain no new Archive Time Stamp.
Archive Time Stamp and signature check of steps 3./4./5.
(OCSP Responses, CRL-Reports).
8.
Start the complete Archive Time Stamp renewal process. The complete Archive Time Stamp renewal process was started
successfully.
9.
Observe the requests of the ArchiSig module to the
102
Observations
ArchiSig will request verification of the very last Archive Time
Federal Office for Information Security