Re: [nodejs] Is NodeJS SP800-131A compliant?

[Ben Noordhuis]

On Mon, Apr 29, 2013 at 2:35 PM, Vishwanath <vhaw...@gmail.com> wrote:
> Hi,
> I couldn't find any discussion related to SP800-131A compliance. I would
> like to know if NodeJS does anything special to be complaint with this
> section?
>
> (*National Institute of Standards and Technology, Special Publications
> 800-131A which is entitled "Transitions: Recommendation for Transitioning
> the Use of Cryptographic Algorithms and Key Lengths")

We make no claims of compliance whatsoever.

[Alex Kocharin]

 

Node.js does not do anything to be complaint with this. It uses openssl library to handle cryptographic tasks, so if openssl supports it, node.js supports it. Therefore all questions like this should be asked to openssl-related mailing lists.

 

I can say that node.js/openssl supports the most secure open protocols in the world, so if your only concern is security, you'll be fine.

 

If you're working for the government and really need to use some weird/unsecure protocols to pass audits, google for "openssl sp800-131a".

 

--
// alex

 

 

29.04.2013, 16:46, "Vishwanath" <vhaw...@gmail.com>:

Hi,

I couldn't find any discussion related to SP800-131A compliance. I would like to know if NodeJS does anything special to be complaint with this section? 

 

(*National Institute of Standards and Technology, Special Publications 800-131A which is entitled "Transitions: Recommendation for Transitioning the Use of Cryptographic Algorithms and Key Lengths")

 

 

thanks,

Vishwanath

 

 

--
--
Job Board: http://jobs.nodejs.org/
Posting guidelines: https://github.com/joyent/node/wiki/Mailing-List-Posting-Guidelines
You received this message because you are subscribed to the Google
Groups "nodejs" group.
To post to this group, send email to nod...@googlegroups.com
To unsubscribe from this group, send email to
nodejs+un...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/nodejs?hl=en?hl=en
 
---
You received this message because you are subscribed to the Google Groups "nodejs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to nodejs+un...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.
 
 

[Sam Roberts]

Hi Vishwanath, that document is a list of recommended algorithms and
the strengths they should be used at, anybody using crypto should pay
attention to its recommendations, but other than supporting up to the
recommended strengths, there isn't anything special that needs to be
done.

Sam