You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Merge: crypto: testmgr - disallow certain DRBG hash functions in FIPS mode
MR: https://gitlab.com/redhat/centos-stream/src/kernel/centos-stream-9/-/merge_requests/1968
Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=2152131
Upstream Status: merged into herbert/cryptodev-2.6.git
According to FIPS 140-3 IG, section D.R "Hash Functions Acceptable for
Use in the SP 800-90A DRBGs", modules certified after May 16th, 2023
must not support the use of: SHA-224, SHA-384, SHA512-224, SHA512-256,
SHA3-224, SHA3-384. Disallow HMAC and HASH DRBGs using SHA-384 in FIPS
mode.
Signed-off-by: Vladis Dronov <vdronov@redhat.com>
Approved-by: Jan Stancek <jstancek@redhat.com>
Approved-by: Ondrej Mosnáček <omosnacek@gmail.com>
Signed-off-by: Herton R. Krzesinski <herton@redhat.com>
0 commit comments