Comment on AES-GMAC-CTR (SIV)parentComments−Nursie7yFIPS also ,at least a decade ago, ruled out things like PFS because actually the federal goverent wanted to be able to audit past traffic.−jnwatson7yCitation please. There are multiple standards that implement PFS in the FIPS specs.−Nursie7yFair enough, the ones I was involved with implementing/complying with (FIPS 140-2) ruled out things like DH(E) key exchange.We had to comply with that standard to sell to the federal government at the time.Things may well have changed.−GhettoMaestro7yECDHE is standard for FIPS these days.
Comments
FIPS also ,at least a decade ago, ruled out things like PFS because actually the federal goverent wanted to be able to audit past traffic.
Citation please. There are multiple standards that implement PFS in the FIPS specs.
Fair enough, the ones I was involved with implementing/complying with (FIPS 140-2) ruled out things like DH(E) key exchange.
We had to comply with that standard to sell to the federal government at the time.
Things may well have changed.
ECDHE is standard for FIPS these days.