[74380] in cryptography@c2.net mail archive
Re: How important is FIPS 140-2 Level 1 cert?
daemon@ATHENA.MIT.EDU (Ben Laurie)
Tue Jan 2 17:14:01 2007
X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
Date: Fri, 29 Dec 2006 13:01:56 +0000
From: Ben Laurie <ben@algroup.co.uk>
To: Peter Gutmann <pgut001@cs.auckland.ac.nz>
Cc: tls@rek.tjls.com, cryptography@metzdowd.com
In-Reply-To: <E1H0GSK-0000Ui-00@medusa01.cs.auckland.ac.nz>
Peter Gutmann wrote:
> Ben Laurie <ben@algroup.co.uk> writes:
>
>> While we're at it, an amusing fact I learnt about FIPS-140 while I was
>> implementing it for OpenSSL is that some of the Monte Carlo tests have output
>> that's independent of the input.
>
> Did you also notice that the MCT test vectors published in "The Random Number
> Generator Validation System (RNGVS)" are wrong? Or is that what you meant by
> "independent of the input"?
When I did FIPS, there was no RNGVS :-)
--
http://www.apache-ssl.org/ben.html http://www.links.org/
"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com
