Comment on Cache Attacks on CTR_DRBGparentComments−baby7yWhat I don’t understand about this is, if you’re FIPS compliant you can’t just use the PRNG of /dev/urandom? You must use a FIPS as well?−f2f7yyes. fips compliance says "use what we tell you to use. want government contracts? be fips compliant."it's a source of a lot of online discussion as the compliant algorithms aren't the best available. here's to bureaucracy!
Comments
What I don’t understand about this is, if you’re FIPS compliant you can’t just use the PRNG of /dev/urandom? You must use a FIPS as well?
yes. fips compliance says "use what we tell you to use. want government contracts? be fips compliant."
it's a source of a lot of online discussion as the compliant algorithms aren't the best available. here's to bureaucracy!