Maniphest T5540

Update fipsdrv and cavs_driver.pl
Closed, ResolvedPublic
Actions

Assigned To
• werner
Authored By
• gniibe
Aug 3 2021, 4:46 AM
Tags
Subscribers
• gniibe
Jakuje
• werner

Description

For FIPS 140-3 support, we need to update things.
At least, we need:

  • fipsdrv
    • DSA with smaller Q is obsolete
    • Need to support DSA2VS with Q and hashalgo specified for FIPS 186-4 (update from FIPS 186-2 and 186-3)
  • cavs_driver.pl needs to be updated to support update of fipsdrv

Revisions and Commits

rC libgcrypt
rCdb928d97b4b6 tests: Remove old CAVS test scripts.

Event Timeline

• gniibe triaged this task as Normal priority.Aug 3 2021, 4:46 AM
• gniibe created this task.

SUSE has patches and version 3235 of cavs_driver.pl, bud it seems that it doesn't support DSA with Q+HASHALGO yet.

Jakuje added a comment.Aug 18 2021, 12:46 PM

The CAVS driver can be safely removed. The certification goes through the ACVP these days so it does not make sense to keep this.

• werner claimed this task.Sep 6 2021, 11:24 AM
• werner moved this task from Backlog to Next on the FIPS board.
• werner added a commit: rCdb928d97b4b6: tests: Remove old CAVS test scripts..Sep 27 2021, 9:10 AM
• werner moved this task from Next to Ready for release on the FIPS board.Oct 4 2021, 11:09 AM
• gniibe closed this task as Resolved.Feb 2 2022, 1:25 AM