Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fips: enforce minimum MAC key length of 112 bits #24199

Draft
wants to merge 2 commits into
base: master
Choose a base branch
from
Draft

fips: enforce minimum MAC key length of 112 bits #24199

wants to merge 2 commits into from

Commits on Apr 28, 2024

  1. fips: enforce minimum MAC key length of 112 bits 

    Most regulations require 112 bits. Post 2030 transition to 128 bits is
likely. Implement security check to validate minimum MAC key length.

For FIPS, set it to 112 bits. This is inline with key sizes
recommendations in https://doi.org/10.6028/NIST.SP.800-131Ar2.

Signed-off-by: Dimitri John Ledkov <dimitri.ledkov@surgut.co.uk>
    @xnox
    xnox committed Apr 28, 2024
    Configuration menu
    Copy the full SHA
    6d89e97 View commit details
    Browse the repository at this point in the history

Commits on May 14, 2024

  1. fixup! rewrite hkdf using low level HMAC_* apis instead of EVP_Q_mac 

    This by-passes the HMAC key length check.
    @xnox
    xnox committed May 14, 2024
    Configuration menu
    Copy the full SHA
    fd39a78 View commit details
    Browse the repository at this point in the history