Re: [pkcs11] Proposal: CKM_RSA_PKCS_FIPS_186_4

[Valerie Anne Fenwick <valerie.fenwick@oracle.com>]

One note on this series of proposed mechs with FIPS_186_4
in the names: we aren't thrilled with the names, but can't
quite agree on a better way of doing it.

I mean, just last week, they mechs were called *FIPS_186_3...
but then the standard revved.  Based on our discussions
around the TPM_1_1 mech... this seems short sighted.

But, they need to be disambiguated from the standard mechs.

We  are also nervous that some customers may think
that the name implies that *these* mechs are approved
in FIPS mode - (which we all know is actually FIPS-140).

thanks,

Valerie

On 07/31/13 02:09 PM, Oscar K So Jr. wrote:
> Proposal: CKM_RSA_PKCS_FIPS_186_4
>
> FIPS-183-4 algorithms:
> http://www.ofr.gov/OFRUpload/OFRData/2013-17396_PI.pdf
>
> This mechanism is equivalent to: CKM_RSA_PKCS
>
>
>
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe from this mail list, you must leave the OASIS TC that
> generates this mail.  Follow this link to all your TCs in OASIS at:
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php


Valerie
--
Valerie Fenwick, http://bubbva.blogspot.com/ @bubbva
Solaris Cryptographic & Key Management Technologies, Manager
Oracle Corporation: 4180 Network Circle, Santa Clara, CA, 95054.