RE: [pkcs11] Proposal: CKM_ECDSA_FIPS_186_4

["Burns, Robert" <Robert.Burns@thalesesec.com>]

Oscar,

Similar to my last comment, we should definitely update the documents to account for 186-4.  Although, in this recommendation it would appear that this mechanism merely adds the restriction of which curves are supported.  Is this best handled this way, or would a "profile" for FIPS 186 be more appropriate?  Seems like in this case it would be better to leave the restrictions with each curve and put them in a profile rather than creating a new mechanism.

Thoughts?

Bob

> -----Original Message-----
> From: pkcs11@lists.oasis-open.org [mailto:pkcs11@lists.oasis-open.org] On
> Behalf Of Oscar K So Jr.
> Sent: Wednesday, July 31, 2013 5:19 PM
> To: pkcs11@lists.oasis-open.org
> Subject: [pkcs11] Proposal: CKM_ECDSA_FIPS_186_4
> 
> Proposal: CKM_ECDSA_FIPS_186_4
> 
> FIPS-186-4 algorithms:
> http://www.ofr.gov/OFRUpload/OFRData/2013-17396_PI.pdf
> 
> This mechanism is equivalent to: CKM_ECDSA
> 
> --
> 
> Best,
> Oscar