Messages in this thread | | | From | Gilad Ben-Yossef <> | Date | Mon, 5 Nov 2018 11:18:00 +0200 | Subject | Re: [PATCH] crypto: mark cts(cbc(aes)) as FIPS allowed |
| |
Hi Stephan,
On Mon, Nov 5, 2018 at 10:50 AM Stephan Mueller <smueller@chronox.de> wrote: > > Am Sonntag, 4. November 2018, 11:05:24 CET schrieb Gilad Ben-Yossef: > > Hi Gilad, > > > As per Sp800-38A addendum from Oct 2010[1], cts(cbc(aes)) is > > allowed as a FIPS mode algorithm. Mark it as such. > > > > [1] https://csrc.nist.gov/publications/detail/sp/800-38a/addendum/final > > There are several types of CTS approaches. Only three of those are listed in > the SP800-38A addendum. The source code only refers to some RFCs. > > Did you check whether the CTS implementation matches one or more of the types > listed in the addendum? If yes, may I suggest to add a small statement in the > code noting this fact?
Yes, AFAIK the software implements CBC-CS3 as described in the document. You have a very good point about this not document anywhere. I will send a patch.
While we're at it, does someone find it useful if I implemented the other two modes? They are part of the standard as well, although I am not sure that in itself is sufficient cause.
Gilad
-- Gilad Ben-Yossef Chief Coffee Drinker
values of β will give rise to dom!
| |