FIPS Revalidation
1. ForceZero the odd block when using RDSEED to seed the DRBG. 2. When using FIPSv2 and Intel_ASM speedups, force RDSEED failure flag. 3. Annotate the ecc key pair checking code with NIST process references. 4. Add function to pair-wise check the DH key. 5. Add optional "Q" values for the FFDHE canned parameters from RFC 7919. 6. Enabled the ECC key checks by default for FIPS. 7. Added DH private key check function. 8. Enabled the DH key checks by default for FIPS.
Loading
Please register or sign in to comment