diff options
author | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2013-12-29 16:20:41 +0100 |
---|---|---|
committer | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2013-12-29 16:24:03 +0100 |
commit | 0519904c12d9d93c9f2fd9d13f7adee4925555cb (patch) | |
tree | 18bad355b52aedcc340dad8a6b451fdb2f2cc7c0 | |
parent | 703f159277fc60c8b8ddadf50f95ba700899b698 (diff) | |
download | gnutls-0519904c12d9d93c9f2fd9d13f7adee4925555cb.tar.gz |
doc update
-rw-r--r-- | NEWS | 12 |
1 files changed, 6 insertions, 6 deletions
@@ -27,15 +27,15 @@ a fork is detected. ** libgnutls: Added --enable-fips140-mode configuration option. That option enables: - o FIPS-186-4 compliant DSA and DH key generation (using provable primes) - o The FIPS-140-2 compliant DRBG-AES deterministic random generator. - o Self-tests on initialization on ciphers/MACs, public key algorithms and - random generator. - o Initialization on library load (when GnuTLS is a shared library) + o DSA and DH key generation as in FIPS-186-4 (using provable primes) + o The DRBG-AES deterministic random generator from The ANSI X9.31 + Appendix A.2.4. + o Self-tests on initialization on ciphers/MACs, public key algorithms + and the random generator. o MD5 is included for TLS purposed but cannot be used by the high level hashing functions. o All ciphers except AES are disabled. - o All MACs and hashes except SHA are disabled (i.e., HMAC-MD5). + o All MACs and hashes except GCM and SHA are disabled (e.g., HMAC-MD5). o All keys (temporal and long term) are zeroized after use. o Security levels are adjusted to the FIPS140-2 recommendations (rather than ECRYPT). |