Skip to content

Make only approved algo when in FIPS mode#1577

Merged
jyao1 merged 1 commit into
DMTF:mainfrom
Wenxing-hou:only_approved_algo_in_FIPS
Jan 7, 2023
Merged

Make only approved algo when in FIPS mode#1577
jyao1 merged 1 commit into
DMTF:mainfrom
Wenxing-hou:only_approved_algo_in_FIPS

Conversation

@Wenxing-hou

@Wenxing-hou Wenxing-hou commented Jan 4, 2023

Copy link
Copy Markdown
Contributor

Reference: #1260

The approved algo is listed at: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-140Cr1.pdf

Signed-off-by: Wenxing Hou wenxing.hou@intel.com

@steven-bellock

steven-bellock commented Jan 4, 2023

Copy link
Copy Markdown
Contributor

This logic should be in https://github.com/DMTF/libspdm/blob/main/include/internal/libspdm_lib_config.h In addition https://github.com/DMTF/libspdm/blob/main/include/internal/libspdm_macro_check.h should check that at least one FIPS algorithm is supported.

Fix the issue: DMTF#1260

The approved algo is listed at:https://nvlpubs.nist.gov/nistpubs/
SpecialPublications/NIST.SP.800-140Cr1.pdf

Signed-off-by: Wenxing Hou <wenxing.hou@intel.com>
@Wenxing-hou Wenxing-hou force-pushed the only_approved_algo_in_FIPS branch from 424d92c to d713965 Compare January 5, 2023 03:11
@Wenxing-hou

Copy link
Copy Markdown
Contributor Author

This logic should be in https://github.com/DMTF/libspdm/blob/main/include/internal/libspdm_lib_config.h In addition https://github.com/DMTF/libspdm/blob/main/include/internal/libspdm_macro_check.h should check that at least one FIPS algorithm is supported.

Thanks. I have move the code to internal/libspdm_lib_config.h.
And I have submit the PR #1581 to check that at least one FIPS algorithm is supported.

@steven-bellock steven-bellock added enhancement New feature or request security An issue that impacts security labels Jan 5, 2023
@steven-bellock steven-bellock added this to the Q1 2023 milestone Jan 5, 2023
@jyao1 jyao1 merged commit a24b343 into DMTF:main Jan 7, 2023
@Wenxing-hou Wenxing-hou deleted the only_approved_algo_in_FIPS branch March 23, 2023 07:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request security An issue that impacts security

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants