4 ms·
How come Ed25519 is not approved?
by MrResearcher 3y ago
How come Ed25519 is not approved?
- cipherboy 3y agoIt is in FIPS 186-5 which is a very recent standard. Likely the underlying implementation has not undergone recertification to include it, as NIST has quite the backlog for FIPS certifications. See: https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf and https://csrc.nist.gov/projects/cryptographic-module-validation-program/modules-in-process/modules-in-process-list https://csrc.nist.gov/projects/cryptographic-module-validati...
- linuxguy2 3y agoI used FIPS 186-5 in an argument with my InfoSec team to get ed25519 added to the list of accepted SSH key types on SSH servers running in FIPS mode. What a fun day :P