Re: authenc methods vs FIPS in light of unencrypted associated data

On Fri, Jun 03, 2016 at 08:42:31AM +0200, Stephan Mueller wrote: > > Herbert, when using crypto_spawn_*, is there a flag set by the crypto API > that > the to-be-instantiated cipher is invoked by the kernel crypto API instead of > by a user? I would assume that the INTERNAL flag could be of rele

Re: authenc methods vs FIPS in light of unencrypted associated data

Am Donnerstag, 2. Juni 2016, 18:01:04 schrieb Marcus Meissner: Hi Marcus, Herbert > Hi, > > In February I already tagged some authenc ciphers for FIPS compatibility. > > I currently revisit this to get testmgr running all the tests in strict FIPS > mode. > > The authenc() class is troublesome.

authenc methods vs FIPS in light of unencrypted associated data

Hi, In February I already tagged some authenc ciphers for FIPS compatibility. I currently revisit this to get testmgr running all the tests in strict FIPS mode. The authenc() class is troublesome. There is a HASH + ENC part of this method, but you can also add associated data, which is not enc