Skip to content

Commit 78778e1

Browse files
livebe01livebe01
authored
Merge pull request #1620 from usnistgov/livebe01-updates-KAS-prerequisites
Updates KAS and KAS SSC prerequisites
2 parents c129dc9 + b0d1040 commit 78778e1

File tree

6 files changed

+12
-92
lines changed

6 files changed

+12
-92
lines changed

‎src/kas/sp800-56ar3/ecc/sections/05-capabilities.adoc‎

Lines changed: 2 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11

22
[[prereq_algs]]
3-
=== Prerequisite Algorithms
3+
=== Required Prerequisite Algorithms
44

55
Some algorithm implementations rely on other cryptographic primitives. For example, IKEv2 uses an underlying SHA algorithm. Each of these underlying algorithm primitives must be validated, either separately or as part of the same submission. ACVP provides a mechanism for specifying the required prerequisites:
66

@@ -15,22 +15,7 @@ Some algorithm implementations rely on other cryptographic primitives. For examp
1515
| prereqAlgVal| prerequistie algorithm validation| object with algorithm and valValue properties| see above| Yes
1616
|===
1717

18-
KAS has conditional prerequisite algorithms, depending on the capabilities registered:
19-
20-
[[prereqs_requirements_table]]
21-
22-
.Prerequisite requirement conditions
23-
|===
24-
| Prerequisite Algorithm| Condition
25-
26-
| DRBG | Always *REQUIRED*
27-
| SHA | Always *REQUIRED*
28-
| ECDSA | If the implementation supports fullVal (see <<supported_functions>>), then ECDSA keyVer validation is *REQUIRED*. If the implementation supports keyPairGen (see <<supported_functions>>), then ECDSA keyGen and ECDSA keyVer validation are *REQUIRED*.
29-
| CMAC | CMAC validation *REQUIRED* when IUT is performing KeyConfirmation (KC) or a KDF and utilizing CMAC.
30-
| HMAC | HMAC validation *REQUIRED* when IUT is performing KeyConfirmation (KC) or a KDF and utilizing HMAC.
31-
| KMAC | KMAC validation *REQUIRED* when IUT is performing KeyConfirmation (KC) or a KDF and utilizing KMAC.
32-
|===
33-
18+
Required prerequisite algorithms for KAS can be found at https://csrc.nist.gov/Projects/cryptographic-algorithm-validation-program/prerequisites.
3419

3520
[[cap_ex]]
3621
=== Algorithm Capabilities JSON Values

‎src/kas/sp800-56ar3/ffc/sections/05-capabilities.adoc‎

Lines changed: 2 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11

22
[[prereq_algs]]
3-
=== Prerequisite Algorithms for KAS FFC Validations
3+
=== Required Prerequisite Algorithms for KAS FFC Validations
44

55
Some algorithm implementations rely on other cryptographic primitives. For example, IKEv2 uses an underlying SHA algorithm. Each of these underlying algorithm primitives must be validated, either separately or as part of the same submission. ACVP provides a mechanism for specifying the required prerequisites:
66

@@ -15,22 +15,7 @@ Some algorithm implementations rely on other cryptographic primitives. For examp
1515
| prereqAlgVal| prerequistie algorithm validation| object with algorithm and valValue properties| see above| Yes
1616
|===
1717

18-
KAS has conditional prerequisite algorithms, depending on the capabilities registered:
19-
20-
[[prereqs_requirements_table]]
21-
22-
.Prerequisite requirement conditions
23-
|===
24-
| Prerequisite Algorithm| Condition
25-
26-
| DRBG | Always *REQUIRED*
27-
| SHA | Always *REQUIRED*
28-
| DSA | DSA KeyGen validation *REQUIRED* when IUT makes use of the "FB" or "FB" (legacy) domain parameters for the generation/validation of keys within the module boundary.
29-
| CMAC | CMAC validation *REQUIRED* when IUT is performing KeyConfirmation (KC) or a KDF and utilizing CMAC.
30-
| HMAC | HMAC validation *REQUIRED* when IUT is performing KeyConfirmation (KC) or a KDF and utilizing HMAC.
31-
| KMAC | KMAC validation *REQUIRED* when IUT is performing KeyConfirmation (KC) or a KDF and utilizing KMAC.
32-
|===
33-
18+
Required prerequisite algorithms for KAS can be found at https://csrc.nist.gov/Projects/cryptographic-algorithm-validation-program/prerequisites.
3419

3520
[[cap_ex]]
3621
=== KAS FFC Algorithm Capabilities JSON Values

‎src/kas/sp800-56ar3/ssc/ecc/sections/05-capabilities.adoc‎

Lines changed: 2 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11

22
[[prereq_algs]]
3-
=== Prerequisite Algorithms for KAS FFC Validations
3+
=== Required Prerequisite Algorithms for KAS FFC Validations
44

55
Some algorithm implementations rely on other cryptographic primitives. For example, IKEv2 uses an underlying SHA algorithm. Each of these underlying algorithm primitives must be validated, either separately or as part of the same submission. ACVP provides a mechanism for specifying the required prerequisites:
66

@@ -15,18 +15,7 @@ Some algorithm implementations rely on other cryptographic primitives. For examp
1515
| prereqAlgVal| prerequisite algorithm validation| object with algorithm and valValue properties| see above| Yes
1616
|===
1717

18-
KAS has conditional prerequisite algorithms, depending on the capabilities registered:
19-
20-
[[prereqs_requirements_table]]
21-
22-
.Prerequisite requirement conditions
23-
|===
24-
| Prerequisite Algorithm| Condition
25-
26-
| DRBG | Always *REQUIRED*
27-
| SHA | Always *REQUIRED*
28-
| ECDSA | ECDSA KeyGen/KeyVer validation *REQUIRED* when IUT makes use of the generation/validation of keys within the module boundary.|===
29-
|===
18+
Required prerequisite algorithms for KAS-SSC can be found at https://csrc.nist.gov/Projects/cryptographic-algorithm-validation-program/prerequisites.
3019

3120
[#properties]
3221
=== Property Registration

‎src/kas/sp800-56ar3/ssc/ffc/sections/05-capabilities.adoc‎

Lines changed: 2 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11

22
[[prereq_algs]]
3-
=== Prerequisite Algorithms for KAS FFC Validations
3+
=== Required Prerequisite Algorithms for KAS FFC SSC Validations
44

55
Some algorithm implementations rely on other cryptographic primitives. For example, IKEv2 uses an underlying SHA algorithm. Each of these underlying algorithm primitives must be validated, either separately or as part of the same submission. ACVP provides a mechanism for specifying the required prerequisites:
66

@@ -15,19 +15,7 @@ Some algorithm implementations rely on other cryptographic primitives. For examp
1515
| prereqAlgVal| prerequistie algorithm validation| object with algorithm and valValue properties| see above| Yes
1616
|===
1717

18-
KAS has conditional prerequisite algorithms, depending on the capabilities registered:
19-
20-
[[prereqs_requirements_table]]
21-
22-
.Prerequisite requirement conditions
23-
|===
24-
| Prerequisite Algorithm| Condition
25-
26-
| DRBG | Always *REQUIRED*
27-
| SHA | Always *REQUIRED*
28-
| DSA | DSA KeyGen validation *REQUIRED* when IUT makes use of the "FB" or "FB" (legacy) domain parameters for the generation/validation of keys within the module boundary.
29-
| SafePrimes | SafePrimes KeyGen/KeyVer validation *REQUIRED* when IUT makes use of the safe-prime groups for the generation/validation of keys within the module boundary.
30-
|===
18+
Required prerequisite algorithms for KAS FFC SSC can be found at https://csrc.nist.gov/Projects/cryptographic-algorithm-validation-program/prerequisites.
3119

3220
[#properties]
3321
=== Property Registration

‎src/kas/sp800-56br2/sections/05-capabilities.adoc‎

Lines changed: 2 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11

22
[[prereq_algs]]
3-
=== Prerequisite Algorithms for KAS IFC Validations
3+
=== Required Prerequisite Algorithms for KAS IFC Validations
44

55
Some algorithm implementations rely on other cryptographic primitives. For example, IKEv2 uses an underlying SHA algorithm. Each of these underlying algorithm primitives must be validated, either separately or as part of the same submission. ACVP provides a mechanism for specifying the required prerequisites:
66

@@ -16,22 +16,7 @@ Some algorithm implementations rely on other cryptographic primitives. For examp
1616
| prereqAlgVal| prerequisite algorithm validation| object with algorithm and valValue properties| see above| Yes
1717
|===
1818

19-
KAS has conditional prerequisite algorithms, depending on the capabilities registered:
20-
21-
[[prereqs_requirements_table]]
22-
23-
.Prerequisite requirement conditions
24-
|===
25-
| Prerequisite Algorithm| Condition
26-
27-
| DRBG | Always *REQUIRED*
28-
| SHA | Always *REQUIRED*
29-
| RSA | RSA KeyGen validation *REQUIRED* when IUT makes use of the generation/validation of keys within the module boundary.
30-
| CMAC | CMAC validation *REQUIRED* when IUT is performing KeyConfirmation (KC) or a KDF and utilizing CMAC.
31-
| HMAC | HMAC validation *REQUIRED* when IUT is performing KeyConfirmation (KC) or a KDF and utilizing HMAC.
32-
| KMAC | KMAC validation *REQUIRED* when IUT is performing KeyConfirmation (KC) or a KDF and utilizing KMAC.
33-
|===
34-
19+
Required prerequisite algorithms for KAS can be found at https://csrc.nist.gov/Projects/cryptographic-algorithm-validation-program/prerequisites.
3520

3621
[[cap_ex]]
3722
=== KAS IFC Algorithm Capabilities JSON Values

‎src/kas/sp800-56br2/ssc/sections/05-capabilities.adoc‎

Lines changed: 2 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11

22
[[prereq_algs]]
3-
=== Prerequisite Algorithms
3+
=== Required Prerequisite Algorithms for KAS IFC SSC
44

55
Some algorithm implementations rely on other cryptographic primitives. For example, IKEv2 uses an underlying SHA algorithm. Each of these underlying algorithm primitives must be validated, either separately or as part of the same submission. ACVP provides a mechanism for specifying the required prerequisites:
66

@@ -16,19 +16,7 @@ Some algorithm implementations rely on other cryptographic primitives. For examp
1616
| prereqAlgVal | prerequisite algorithm validation | object with algorithm and valValue properties | see above | Yes
1717
|===
1818

19-
KAS has conditional prerequisite algorithms, depending on the capabilities registered:
20-
21-
[[prereqs_requirements_table]]
22-
23-
.Prerequisite requirement conditions
24-
|===
25-
| Prerequisite Algorithm| Condition
26-
27-
| DRBG | Always *REQUIRED*
28-
| SHA | Always *REQUIRED*
29-
| RSA | RSA KeyGen validation *REQUIRED* when IUT makes use of the generation/validation of keys within the module boundary.
30-
|===
31-
19+
Required prerequisite algorithms for KAS IFC SSC can be found at https://csrc.nist.gov/Projects/cryptographic-algorithm-validation-program/prerequisites.
3220

3321
[[cap_ex]]
3422
=== Algorithm Capabilities JSON Values

0 commit comments

Comments
 (0)