VALIDATED PRODUCTS LIST 1993 No. 4 Programming Languages Database Language SQL Graphics GOSIP POSIX Judy B. Kailey Computer Security Editor U.S. DEPARTMENT OF COMMERCE Technology Administration National Institute of Standards and Technology Computer Systems Laboratory Software Standards Validation Group Gaithersburg, MD 20899 October 1993 {Supersedes July 1993 issue) -i)C 100 .U56 NIST //5274 1993 DATE DUE QrUhi j Demco, Inc. 38-293 NISTIR 5274 (Supersedes NISTIR 5220) VALIDATED PRODUCTS LIST 1993 No. 4 Programming Languages Database Language SQL Graphics GOSIP POSiX Judy B. Kailey Computer Security Editor U.S. DEPARTMENT OF COMMERCE Technology Administration National Institute of Standards and Technology Computer Systems Laboratory Software Standards Validation Group Gaithersburg, MD 20899 October 1993 (Supersedes July 1993 issue) U.S. DEPARTMENT OF COMMERCE Ronald H. Brown, Secretary TECHNOLOGY ADMINISTRATION Mary L Good, Under Secretary for Technology NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY Arati Prabhakar, Director / FOREWORD The Validated Products List is a collection of registers describing implementations of Federal Information Processing Standards (FIPS) that have been validated for conformance to FIPS. The Validated Products List also contains information about the organizations, test methods and procedures that support the validation programs for the FIPS identified in this document. The Validated Products List is updated quarterly. IV TABLE OF CONTENTS 1. INTRODUCTION 1-1 1.1 Purpose 1-1 1.2 Document Organization 1-2 1.2.1 Programming Languages 1-2 1.2.2 Database Language SQL 1-2 1.2.3 Graphics 1-2 1.2.4 GOSIP 1-2 1.2.5 POSIX 1-2 1.2.6 Computer Security 1-2 1.2.7 FIPS Conformance Testing Products 1-2 2. PROGRAMMING LANGUAGES 2-1 2.1 FIPS Programming Language Standards 2-1 2.2 Organization of Programming Language Processor Entries 2-1 2.3 Validation of Processors 2-2 2.3.1 Validation Requirements 2-2 2.3.2 Placement in the List 2-3 2.3.3 Removal from the List 2-3 2.3.4 Validation Procedures 2-3 2.4 Certificate of Validation 2-3 2.5 Language Processor Validation Suites 2-4 2.6 Testing Laboratories and Supporting Organizations 2-5 2.7 Language Processors with Certificates - No Nonconformities 2-7 2.7.1 COBOL Processors 2-7 2.7.2 Fortran Processors 2-11 2.7.3 Ada Processors 2-19 2.7.4 Pascal Processors 2-51 2.7.5 C Processors 2-53 2.7.6 Mumps Processors 2-59 2.8 Language Processors with Registered Reports Only 2-60 2.8.1 COBOL Processors with Nonconformities 2-60 3. DATABASE LANGUAGE (SQL) 3-1 3.1 FIPS Database Language Standards 3-1 3.2 Organization of Database Language Processor Entries 3-1 3.3 Validation Requirements 3-2 3.4 Certificate of Validation 3-2 3.5 Registered Report 3-2 3.6 Validation Procedures 3-2 3.7 SQL Validation System 3-2 3.8 SQL Processors 3-4 4. GRAPHICS CONFORMANCE TESTING 4-1 4.1 FIPS GKS Standard 4-1 4.1.1 Organization of GKS Entries 4-1 4.2 FIPS PHIGS Standard 4-2 4.2.1 Organization of PHIGS Entries 4-2 4.3 FIPS CGM Standard 4-3 4.3.1 CGM Test Labs and Test Suite 4-3 4.3.2 Certificate of Validation 4-3 4.3.3 Validation Procedures and Test Suite 4-4 4.3.4 Validated Metafiles 4-4 4.4 Raster Graphics Standards 4-4 4.4.1 Certificate of Validation 4-4 4.4.2 Information Pack 4-4 4.5 GKS Implementations 4-5 4.6 Computer Graphics Metafiles 4-6 4.7 PHIGS Applications 4-7 5. U.S. GOSIP Testing Program Register Database System (GRD) 5-1 5.1 Description 5-1 5.2 U.S. GOSIP Register Database (GRD) 5-1 5.3 How To Access The GOSIP Register Database (GRD) 5-1 5.4 GOSIP Registers 5-3 5.4.1 Register of Conformance Testing Laboratories 5-3 5.4.2 Register of Approved US GOSIP MOT Validation Laboratories 5-5 5.4.3 Register of Conformance Tested GOSIP Products 5-6 5.4.4 Register of GOSIP Interoperability Test Suites 5-52 5.4.5 Register of GOSIP Interoperability Test and Registration Services 5-52 5.4.6 Register of GOSIP Means of Testing 5-53 5.4.7 US GOSIP PICS PROFORMA 5-62 5.4.8 GOSIP Register Database Abstract Test Suites (ATS) 5-65 6. NIST POSIX CONFORMANCE TESTING 6-1 6.1 FIPS POSIX Standard 6-1 6.2 POSIX Test Procedures 6-1 6.3 POSIX Test Suite 6-1 6.4 Validation Requirements 6-1 6.5 Testing Laboratories for NIST POSIX (FIPS 151-1) 6-2 6.6 Validated Products for NIST POSIX (FIPS 151-1) 6-3 6.7 Testing Laboratories and Validated Products for NIST POSIX (FIPS 151-2) 6-13 7. COMPUTER SECURITY 7-1 7.1 Cryptographic Standards 7-1 7.2 Data Encryption Validation Tests 7-1 7.3 Message Authentication Code (MAC) Validation System 7-1 7.4 Key Management Validation System (KMVS) 7-1 7.5 General 7-2 7.5.1 Request for Validation 7-2 7.5.2 Information about Validated Products 7-2 7.5.3 Validation Documentation 7-2 7.6 DES Validated Devices 7-3 7.7 Message Authentication Code (MAC) Implementations 7-9 7.8 Validations for Key Management 7-12 APPENDIX A FIPS CONFORMANCE TESTING PRODUCTS AND SERVICES A-1 / vi 1 1. INTRODUCTION 1.1 Purpose The testing of Information Technology (IT) Products to determine the degree to which they conform to specific Federal Information Processing Standards (FIPS) may be required by Government agencies as specified by the FIPS, Federal Information Resources Management Regulation (FIRMR) Parts 201- 20.303, 201-20.304, and 201-39.1002, and the associated Federal ADP and Telecommunications Standards Index. Products having a current validation certificate or test report may be offered or delivered by vendors in response to requirements as set forth in solicitations by Federal agencies. The Validated Products List (VPL) contains conformance testing information for the following IT Standards: Programming Languages COBOL, Fortran, Ada, Pascal, C, and MUMPS Database Language SQL Graphics GOSIP POSIX Computer Security This List is updated and published quarterly. The information contained herein is supplied by the contributors listed in Section 2.6 and Appendix A, and is current as of the tenth of the month preceding the publication date. Copies of the VPL may be obtained from: National Technical Information Service U.S. Department of Commerce 5285 Port Royal Road Springfield, VA 22151. Subscriptions: (703) 487-4630 Individual Copies: (703) 487-4650 Ordering Number: PB93-937303/AS The entries in the printed VPL are contained in WordPerfect Version 5.1 files and may be accessed on the Internet using the instructions listed below. Type: ftp speckle.ncsl.nist.gov (internet address is 129.6.59.2) Login as user ftp Type your e-mail address as the password Type: cd pub/vpl Type: binary Type: get and the name of the file you want; e.g. language.vpl Questions or comments concerning the VPL should be directed to: National Institute of Standards and Technology (NIST) Computer Systems Laboratory Software Standards Validation Group Building 225, Room A266 Gaithersburg, MD 20899 Telephone (301) 975-3274 1 - 12 Document Organization 1.2.1 Programming Languages Section 2 identifies those COBOL, Fortran, Pascal, C, Ada, and MUMPS programming language processors that have a current validation certificate or registered test report referencing the applicable FTPS as of the date of this publication. 1.2.2 Database Language SQL Section 3 identifies those SQL language processors that have a validation certificate or a registered test report for FIPS PUB 127-1 as of the date of this publication. 123 Graphics Section 4 lists the implementations or files for which a validation certificate is currently in place. These entries include: Graphical Kernel System (GKS) implementations (FIPS PUB 120-1), Programmer’s HierarchicsJ Interactive Graphics Systems (PHIGS) (FIPS PUB 153), Computer Graphics Metafiles (CGMs) (FIPS PUB 128), Raster Graphics data files (FIPS PUB 150). 1.2.4 GOSIP Section 5 contains information regarding FIPS PUB 146-1, GOSIP, conformance testing registers. 1.2.6 1.2.5 POSIX Section 6 identifies POSIX products that have a current validation certificate for FIPS PUB 151-1 and FIPS PUB 151-2. Computer Security Section 7 contains information regarding validated products for FIPS PUB 46-1, Data Encryption Standard (DES), FIPS PUB 113, Message Authentication Code, ANSI X9.9, and FIPS PUB 171, Key Management Using ANSI X9.17. 12.7 FIPS Conformance Testing Products Appendix A lists FIPS conformance testing products and services available to the public. Information for these products and services may be obtained by contacting the appropriate person listed. / 1 -2 1 2. PROGRAMMING LANGUAGES 2.1 FIPS Programming Language Standards As specified by the FIPS, FIRMR and the associated Federal ADP and Telecommunications Standards Index, Federal agencies when acquiring language processors, are responsible for assuring that processors are in accordance with the following FIPS for programming languages: a. COBOL processors must satisfy the provisions of FIPS PUB 21-3, COBOL, and must be identified as implementing all of the language elements of at least one of the subsets of FIPS COBOL as specified in FIPS PUB 21-3. b. BASIC processors must satisfy the provisions of FIPS PUB 68-2, BASIC. c. Fortran processors must satisfy the provision of FIPS PUB 69-1, Fortran, and must be identified as implementing all of the language elements of the subset or full levels of FIPS Fortran as specified in FIPS PUB 69-1.