fipstest.c in nss 3.14.3 does not support prediction resistance = true case
17 views
Skip to first unread message
bratc...@gmail.com
unread,
Apr 17, 2013, 9:38:35 PM4/17/13
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to
Hi,
The fipstest.c does not seem to support the scenario with prediction resistance = true . The case statement for function drbg has to change if prediction resistance is true and also the NIST request file has an additional parameter EntrophyInputPR in case of [Prediction resistance = true ] scenario and this is not even parsed by fipstest.c .
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to dev-tec...@lists.mozilla.org
The NSS drbg does not support all the cases that NIST can test. NSS
itself does not use prediction resistance, only the reseed, so you don't
actually need to test it.