Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

fipstest.c in nss 3.14.3 does not support prediction resistance = true case

17 views
Skip to first unread message

bratc...@gmail.com

unread,
Apr 17, 2013, 9:38:35 PM4/17/13
to
Hi,
The fipstest.c does not seem to support the scenario with prediction resistance = true . The case statement for function drbg has to change if prediction resistance is true and also the NIST request file has an additional parameter EntrophyInputPR in case of [Prediction resistance = true ] scenario and this is not even parsed by fipstest.c .

Please refer the document
http://csrc.nist.gov/groups/STM/cavp/documents/drbg/DRBGVS.pdf

Robert Relyea

unread,
Apr 19, 2013, 6:10:56 PM4/19/13
to dev-tec...@lists.mozilla.org
The NSS drbg does not support all the cases that NIST can test. NSS
itself does not use prediction resistance, only the reseed, so you don't
actually need to test it.

bob

0 new messages