Tester of cryptographic service providers

A method for testing a cryptographic service provider (“CSP”), wherein the CSP has a cryptographic functionality level, the method comprising:

• testing the CSP to determine whether the CSP meets its level of functionality;
• the testing comprising one or more discrete sub-testings of the CSP, each discrete sub-testing has a level of functionality with a level of complexity and each discrete sub-testing is associated with one or more features of a CryptoAPI and with one or more other CSPs, wherein the one or more discrete sub-testings are performed generally in order of least complexity to most complexity;
• examining results of the testing to determine if the CSP which is determined to meet its determined level of functionality also exhibits non-optimal behavior;
• reporting whether the CSP meets its determined level of functionality based upon results of the testing, the reported results comprising annotated information regarding non-optimal behavior when the examining determines the CSP to exhibit non-optimal behavior.

A computer comprising one or more computer storage media having computer-executable instructions that, when executed by the computer, perform a method comprising:

• testing a program module having a functionality level to determine whether the program module meets its level of functionality, wherein the program module is a cryptographic service provider (“CSP”);
• the testing comprising one or more discrete sub-testings of the program module, each discrete sub-testing has a level of functionality with a level of complexity and each discrete sub-testing is associated with one or more features of a CryptoAPI and with one or more cryptographic service providers (CSPs), wherein the one or more discrete sub-testings are performed generally in order of least complexity to most complexity;
• examining results of the testing to determine if the program module which is determined to meet its determined level of functionality also exhibits non-optimal behavior;
• reporting whether the program module meets its determined level of functionality based upon results of the testing, the reported results comprising annotated information regarding non-optimal behavior when the examining determines the program module to exhibit non-optimal behavior.