Closed Bug 298511 Opened 21 years ago Closed 20 years ago

Increase FIPS 186-2 RNG internal state size

Categories

(NSS :: Libraries, defect, P1)

Product:
NSS
Component:
Libraries
Version:
3.10
Platform:
Sun
Solaris
Type:
defect

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: glenbeasley, Assigned: wtc)

References

Details

We only implement FIPS 186-2 RNG whose internal state is 160 bits, this can be shorter than the symmectric key size we need to generate for AES 256. see: VE 07.13.01 We may want to implement ANSI RNG which can have longer seed and seed keys.
Status: NEW → ASSIGNED
Priority: -- → P1
Summary: Implement ANSI RNG for FIPS 140-2 → Implement ANSI RNG for FIPS 140-2
Target Milestone: --- → 3.11
Blocks: 304360
It turns out that FIPS 186-2 RNG can have an internal state (the seed-key, XKEY) size of 160 to 512 bits. So we can continue to use the FIPS 186-2 RNG and just need to increase its internal state size (the b parameter). I've changed the summary of this bug accordingly. I propose that we increase b to 256 bits first. If that is not big enough, we can increase it to the maximum 512 bits. My patch in bug 294106 will fix this bug.
Status: ASSIGNED → RESOLVED
Closed: 20 years ago
Resolution: --- → FIXED
Summary: Implement ANSI RNG for FIPS 140-2 → Increase FIPS 186-2 RNG internal state size
Status: RESOLVED → REOPENED
Resolution: FIXED → ---
Since the patch for this bug is attached to 294106, I'm marking this bug as depending on that one.
Depends on: 294106
This bug has been fixed by the patch for bug 294106.
Status: REOPENED → RESOLVED
Closed: 20 years ago → 20 years ago
Resolution: --- → FIXED
I forgot to note that the RNG's internal state is now 256 bits. If necessary we can further increase it to 512 bits.
You need to log in before you can comment on or make changes to this bug.