summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorNikos Mavrogiannopoulos <nmav@gnutls.org>2013-12-29 16:20:41 +0100
committerNikos Mavrogiannopoulos <nmav@gnutls.org>2013-12-29 16:24:03 +0100
commit0519904c12d9d93c9f2fd9d13f7adee4925555cb (patch)
tree18bad355b52aedcc340dad8a6b451fdb2f2cc7c0
parent703f159277fc60c8b8ddadf50f95ba700899b698 (diff)
downloadgnutls-0519904c12d9d93c9f2fd9d13f7adee4925555cb.tar.gz
doc update
-rw-r--r--NEWS12
1 files changed, 6 insertions, 6 deletions
diff --git a/NEWS b/NEWS
index 834b09514d..9c6c47d2ab 100644
--- a/NEWS
+++ b/NEWS
@@ -27,15 +27,15 @@ a fork is detected.
** libgnutls: Added --enable-fips140-mode configuration option. That
option enables:
- o FIPS-186-4 compliant DSA and DH key generation (using provable primes)
- o The FIPS-140-2 compliant DRBG-AES deterministic random generator.
- o Self-tests on initialization on ciphers/MACs, public key algorithms and
- random generator.
- o Initialization on library load (when GnuTLS is a shared library)
+ o DSA and DH key generation as in FIPS-186-4 (using provable primes)
+ o The DRBG-AES deterministic random generator from The ANSI X9.31
+ Appendix A.2.4.
+ o Self-tests on initialization on ciphers/MACs, public key algorithms
+ and the random generator.
o MD5 is included for TLS purposed but cannot be used by the high level
hashing functions.
o All ciphers except AES are disabled.
- o All MACs and hashes except SHA are disabled (i.e., HMAC-MD5).
+ o All MACs and hashes except GCM and SHA are disabled (e.g., HMAC-MD5).
o All keys (temporal and long term) are zeroized after use.
o Security levels are adjusted to the FIPS140-2 recommendations (rather
than ECRYPT).