fips.sys

[Guest]

Looking for any documentation or samples on using the MS Kernel Mode Cryptographic Module (fips.sys) - I have the security policy document but need to know what the IRP interface is.

 

[KM]

Geoff,

I am not sure this is the right NG for your question. Even though, "Kernel Mode Crypto Driver for RSA" component (that's the
fips.sys) is included in XPe Repository, the XPe docs are very limited about the component programmatic functionality.

The FipsXXXX function table is not documented, I think. The irp to the FIPS.SYS diver via the IoCallDriver function may be described
in DDK, although my local search in DDK docs failed to hit anything around that. (My only guess would be that it should be in some
Win2003 Server DDK docs if such exist).

I guess you would better off posting the question to DDK or Kernel newsgroup. Or you can try finding out the IRP using KD.

Sorry, couldn't be of any help here.
--
Regards,
KM, BSquare Corp.

Looking for any documentation or samples on using the MS Kernel Mode Cryptographic Module (fips.sys) - I have the security policy

document but need to know what the IRP interface is.

 

[Slobodan Brcin \(eMVP\)]

Hi Geoff,

Five months ago I searched for the same thing. I guess that I was not searching hard enough since I was unable to find anything
then.
If you find your answer somewhere please post us a link to this thread.

Thanks,
Slobodan

Looking for any documentation or samples on using the MS Kernel Mode Cryptographic Module (fips.sys) - I have the security policy

document but need to know what the IRP interface is.

 

[Guest]

Knowing the IRP number from a debug session would be a start I suppose, but how would a person find out the format of the input and output buffers?

I'm surprised that FIPS-140 certification was given to an essentially incomplete security policy. Perhaps MS would make more information available if people were to start complaining to NIST...