Messages in this thread | | | Subject | Re: [PATCH 1/3] crypto: ecdh - fix 'ecdh_init' | From | Stephan Mueller <> | Date | Fri, 21 May 2021 11:36:37 +0200 |
| |
Am Freitag, dem 21.05.2021 um 16:13 +0800 schrieb Herbert Xu: > On Fri, May 21, 2021 at 04:08:10PM +0800, Hui Tang wrote: > > > Stephan, can you confirm that both ecdh-nist-p192 and ecdsa-nist-p192 > should be disabled in FIPS mode?
Confirmed with the following caveat: sigver is allowed due to legacy considerations. Siggen / ECDH is only allowed for curves P-224 and higher.
As we introduce ECDSA today, I would not consider a legacy mode and thus disable P-192.
Ciao Stephan
| |