Loren Data's SAM Daily™

FBO DAILY ISSUE OF NOVEMBER 09, 2005 FBO #1444
SOLICITATION NOTICE

D -- FIPS 201 Conformance Testing Toolkit. , Enhancement and Modification

Notice Date

11/7/2005
 

Notice Type

Solicitation Notice
 

NAICS

541519 — Other Computer Related Services
 

Contracting Office

Department of Commerce, National Institute of Standards and Technology (NIST), Acquisition Management Division, 100 Bureau Drive, Building 301, Room B129, Mail Stop 1640, Gaithersburg, MD, 20899-1640
 

ZIP Code

20899-1640
 

Solicitation Number

Reference-Number-06-893-6425
 

Response Due

11/11/2005
 

Archive Date

11/11/2005
 

Description

The National Institute of Standards and Technology (NIST) intends to solicit and negotiate on a sole source basis under the authority of FAR 13.106-1(b) Only One Source Reasonably Available with T-VEC Technologies Inc, Herndon VA for the enhancement and modification of the FIPS 201 Conformance Testing Toolkit. The North American Industry Classification System Code is 541519. The size standard is $21M. Following the Homeland Security Presidential Directive 12 (HSPD-12) issued on Aug 26, 2004, NIST developed the draft standard FIPS 201 (http://csrc.nist.gov/publications/drafts/draft-FIPS_201-110804-public1.pdf), a family of specifications pertaining to smart card personal identity credentials that must be interoperable across all federal agencies. NIST is mandated to establish a conformance testing program to validate products for conformance to SP 800-73. This includes accrediting laboratories, providing them with tools and guidelines to perform conformance testing and validating the evaluations performed by these laboratories. As the developer of the FIPS 201 Conformance Testing Toolkit, T-VEC Technologies, Inc. is singularly qualified to implement the required enhancements and modifications. The Toolkit is NIST owned, not available in the public domain, and distribution is limited only to laboratories accredited under the NIST Personal Identity Verification Program (NPIVP). Under this NPIVP program, NIST is committed to OMB to provide the necessary tools and guidelines to laboratories to enable them to complete the certification process and thereby make available FIPS 201 compliant products in the market by January 2006 to facilitate procurement by all federal agencies. This requirement is for the enhancement and modification of the FIPS 201 Conformance Testing Toolkit as delineated below: (1) (CR1) Change Request 1 (Enhancement): Following the re-definition of Card Application Administration Key, enhance the toolkit with new tests that will test all the different types of authentication modes using this key. (2) (CR2) Change Request 2 (Modification): Following the change in security conditions for two APDU functions (RESET RETRY COUNTER and PUT DATA), modify the tests for testing these functions to incorporate the new security conditions as part of the execution scenarios. (3) (CR3) Change Request 3 (Enhancement): Develop additional tests for verifying execution of chained APDU commands. (4) (CR4) Change Request 4 (Enhancement) : Develop tests for verifying correct implementation of multi-byte length fields as part of BER-TLV data object representation. (5) (CR5) Change Request 5 (Modification/Enhancement): (a) Provide configuration option to re-direct PIV Middleware calls to a PIV card on a smart card reader. (b) Provide tests for additional execution scenarios for the three middleware functions ? pivCrypt, pivPutData and pivGenerateKeyPair. (6) (CR6) Change Request 6 (Enhancement): Provide Configuration Options to input the subset of optional PIV data objects implemented in the particular vendor product under test and modify the toolkit to display and run only those applicable tests. (7) (CR7) Change Request 7 (Enhancement): Develop a Reporting Tool for use by test laboratories that will take the outputs of the test runs and produce test results summary, test verdict as well as provide a means to enter product/vendor information as well as observations on vendor documentation. (8) Other Enhancements and Modifications: Other unforeseen required enhancements and modifications that may be identified in the during the performance of the work. This notice of intent is not a request for competition. However, interested parties may identify their interest and submit a statement of capabilities. The statement of capabilities must be in writing and must contain material in sufficient detail to allow NIST to determine if the party can perform this requirement. Capability statements must be received in the contracting office by 3:30 PM EST on November 11, 2005. A determination by the Government not to compete this requirement based on responses to this notice is solely within the discretion of the Government. Information received will be considered solely for the purpose of determining whether to conduct a competitive procurement.
 

Place of Performance

Address: 100 Bureau Drive, Gaithersburg, MD

Zip Code: 20899

Country: USA
 

Record

SN00927856-W 20051109/051107211758 (fbodaily.com)
 

Source

FedBizOpps.gov Link to This Notice
(may not be valid after Archive Date)

---

| FSG Index  |  This Issue's Index  |  Today's FBO Daily Index Page |