Skip to content

Commit

Permalink
Removes SafePrimes as a KAS 56Ar3 prerequisite
Browse files Browse the repository at this point in the history
CAVP's SafePrimes testing currently does not meet the requirements of SP 800-56Ar3. See #1334. Therefore, removing SafePrimes testing as a KAS 56Ar3 prerequisite.
  • Loading branch information
livebe01 authored Jul 13, 2022
1 parent a343053 commit 71c86f3
Showing 1 changed file with 0 additions and 1 deletion.
1 change: 0 additions & 1 deletion src/kas/sp800-56ar3/ffc/sections/05-capabilities.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,6 @@ KAS has conditional prerequisite algorithms, depending on the capabilities regis
| DRBG | Always *REQUIRED*
| SHA | Always *REQUIRED*
| DSA | DSA KeyGen validation *REQUIRED* when IUT makes use of the "FB" or "FB" (legacy) domain parameters for the generation/validation of keys within the module boundary.
| SafePrimes | SafePrimes KeyGen/KeyVer validation *REQUIRED* when IUT makes use of the "FB" or "FB" (legacy) domain parameters for the generation/validation of keys within the module boundary.
| CMAC | CMAC validation *REQUIRED* when IUT is performing KeyConfirmation (KC) or a KDF and utilizing CMAC.
| HMAC | HMAC validation *REQUIRED* when IUT is performing KeyConfirmation (KC) or a KDF and utilizing HMAC.
| KMAC | KMAC validation *REQUIRED* when IUT is performing KeyConfirmation (KC) or a KDF and utilizing KMAC.
Expand Down

0 comments on commit 71c86f3

Please sign in to comment.