FIPS and GCM

[Jonathan Schulze-Hewett <schulze-hewett@infoseccorp.com>]

All,

 

Likely a stupid question, but as FIPS validation appears to prohibit the use of External IVs for GCM what is the expected behavior of C_EncryptInit with GCM as a mechanism? Is it expected that the IV field of the input parameters will be changed by the C_EncryptInit call so that the module generated IV can be communicated? Is there or should there be a value in the parameters that indicates what form of IV generation is needed?

 

Thanks,

Jonathan

 

Jonathan Schulze-Hewett

Director of Development

Information Security Corp.

schulze-hewett@infoseccorp.com

708-445-1704

 

Attachment: smime.p7s
Description: S/MIME cryptographic signature