canmove, Confirmed users
937
edits
Security Policy: Difference between revisions
→Specification of Security Policy
No edit summary |
|||
| Line 93: | Line 93: | ||
|- | |- | ||
| 22 || The FIPS PUB 140-2 cipher suite shall consist solely of | | 22 || The FIPS PUB 140-2 cipher suite shall consist solely of | ||
* Triple-DES (FIPS PUB 46-3) or AES (FIPS PUB 197) for encryption/decryption, | * Triple-DES (FIPS PUB 46-3) or AES (FIPS PUB 197) for symmetric key encryption/decryption in ECB and CBC modes, | ||
* SHA-1, SHA-256, SHA-384, or SHA-512 (FIPS PUB 180-2) for hashing, | * SHA-1, SHA-256, SHA-384, or SHA-512 (FIPS PUB 180-2) for hashing, | ||
* HMAC (FIPS PUB 198) for keyed hash, | |||
* Diffie-Hellman, EC Diffie-Hellman, or Key Wrapping using RSA keys for key establishment, and | * Diffie-Hellman, EC Diffie-Hellman, or Key Wrapping using RSA keys for key establishment, and | ||
* DSA (FIPS PUB 186-2), RSA (PKCS #1), or ECDSA (ANSI X9.62) for signature generation and verification. | * DSA (FIPS PUB 186-2), RSA (PKCS #1), or ECDSA (ANSI X9.62) for signature generation and verification. | ||