To: caly who wrote (117 ) 5/14/1999 11:03:00 AM From: caly Read Replies (1) | Respond to of 206
Putting this info here as a convenient repository for info regarding FIPS 140-1 and crypto algorithms that can be used by the U.S. Government....What is FIPS 140-1??? Read here... corsec.com Link to NIST's 140-1 Validation Program csrc.ncsl.nist.gov List of currently approved FIPS 140-1 crypto products: csrc.ncsl.nist.gov What are the currently approved encryption algorithms for sale to the U.S. Government?? Section 9 - Cryptographic Algorithms 9.1 FIPS-approved algorithms Question/Problem What is the current set of FIPS-approved cryptographic algorithms? Resolution Below is the current list of FIPS-approved cryptographic algorithms: Encryption (Secret-key based): Data Encryption Algorithm, in FIPS 46-2, Data Encryption Standard (DES ), using the various modes specified in FIPS 81, DES Modes of Operation. Note: Triple DES is not yet technically a FIPS-approved algorithm, since it is not specified in or referenced by a FIPS. However, it is allowed for U.S. Government use (mentioned in NIST's September 1998 ITL Bulletin), and requirements for its use within a FIPS 140-1 module are specified under Implementation Guidance 9.4. (12/22/98) Skipjack Algorithm, referred to in FIPS 185, Escrowed Encryption Standard (EES) and specified in the R21 Technical Report entitled "SKIPJACK" (S) (R21-TECH-044-91), using the modes specified in FIPS 81. The SKIPJACK algorithm was made public in June 1998. Electronic signatures (Secret-key based): As taken from...csrc.ncsl.nist.gov So what's next for the U.S. Government with regard to crypto algorithms?...the Advanced Encryption Standard. The algorithm selection process for this standard is underway. Read about it here... csrc.nist.gov