485745 - modify fipstest.c to support CAVS 7.1 DRBG testing

Status: RESOLVED FIXED

(NSS :: Tools, defect, P1)

Description

[glen beasley]

NIST have released a new version of their algorithm testing tool which we
have to use from here onwards. The DRBG vector file format has
changed to make it more similar to vector files of the other algorithms.

see:
http://csrc.nist.gov/groups/STM/cavp/announcements.html

I need to verify the other algorithm but this bug will be for the DRBG tests.
I know DRBG testing need to modified, and I'm working on patch.

Comment 1

[glen beasley]

The NIST SP 800-90 Deterministic Random Bit Generator Validation System
http://csrc.nist.gov/groups/STM/cavp/documents/drbg/DRBGVS.pdf

http://csrc.nist.gov/groups/STM/cavp/documents/drbg/drbgval.html

Comment 2

[Nelson Bolyard (seldom reads bugmail)]

Isn't this a blocker for the FIPS release?

Comment 3

[Robert Relyea]

Attachment: This patch was primarily written by Glenn. I just got his patch working.

Comment 4

[Robert Relyea]

Attachment: Glenn's original patch for comparison

Comment 5

[Nelson Bolyard (seldom reads bugmail)]

Comment on attachment 373238 [details] [diff] [review]
This patch was primarily written by Glenn. I just got his patch working.

Bob, you probably meant to ask someone to review this.  
Who did you have in mind?

Comment 6

[glen beasley]

Comment on attachment 373238 [details] [diff] [review]
This patch was primarily written by Glenn. I just got his patch working.

r+ patch. thanks bob for completing this patch.

Comment 7

[glen beasley]

Checking in fipstest.c;
/cvsroot/mozilla/security/nss/cmd/fipstest/fipstest.c,v  <--  fipstest.c
new revision: 1.36; previous revision: 1.35
done