Closed
Bug 298511
Opened 20 years ago
Closed 19 years ago
Increase FIPS 186-2 RNG internal state size
Categories
(NSS :: Libraries, defect, P1)
Tracking
(Not tracked)
RESOLVED
FIXED
3.11
People
(Reporter: glenbeasley, Assigned: wtc)
References
Details
We only implement FIPS 186-2 RNG whose internal state is 160 bits, this can be shorter than the symmectric key size we need to generate for AES 256. see: VE 07.13.01 We may want to implement ANSI RNG which can have longer seed and seed keys.
Assignee | ||
Updated•19 years ago
|
Status: NEW → ASSIGNED
Priority: -- → P1
Summary: Implement ANSI RNG for FIPS 140-2 → Implement ANSI RNG for FIPS 140-2
Target Milestone: --- → 3.11
Assignee | ||
Comment 1•19 years ago
|
||
It turns out that FIPS 186-2 RNG can have an internal state (the seed-key, XKEY) size of 160 to 512 bits. So we can continue to use the FIPS 186-2 RNG and just need to increase its internal state size (the b parameter). I've changed the summary of this bug accordingly. I propose that we increase b to 256 bits first. If that is not big enough, we can increase it to the maximum 512 bits. My patch in bug 294106 will fix this bug.
Status: ASSIGNED → RESOLVED
Closed: 19 years ago
Resolution: --- → FIXED
Summary: Implement ANSI RNG for FIPS 140-2 → Increase FIPS 186-2 RNG internal state size
Assignee | ||
Updated•19 years ago
|
Status: RESOLVED → REOPENED
Resolution: FIXED → ---
Comment 2•19 years ago
|
||
Since the patch for this bug is attached to 294106, I'm marking this bug as depending on that one.
Depends on: 294106
Assignee | ||
Comment 3•19 years ago
|
||
This bug has been fixed by the patch for bug 294106.
Status: REOPENED → RESOLVED
Closed: 19 years ago → 19 years ago
Resolution: --- → FIXED
Assignee | ||
Comment 4•19 years ago
|
||
I forgot to note that the RNG's internal state is now 256 bits. If necessary we can further increase it to 512 bits.
You need to log in
before you can comment on or make changes to this bug.
Description
•