Tag Info

New answers tagged

2

It you need a deterministically derived key for AES, the DRBG algorithms of NIST SP 800-90A are suitable, and their output is directly usable as an AES key. An example use case is when computing an AES session key from a longer-term master key, and the nonce corresponding to that session. AES will expand its key (128, 192 or 256-bit) to 128-bit subkeys (one ...


1

I would prefer to use standardized (like FIPS 140-2) secure random generator, since the whole point is to secure the encryption key. Of course, you might want to check this website for reference: http://www.cryptosys.net/rng_algorithms.html


1

@gammatester gave most of the answer, but he didn't address the last question: would this make HMAC the only NIST approved MAC? No, as of right now, the block cipher-based Message Authentication Codes CMAC and GMAC are also approved. In addition, if you use the approved mode CCM with a empty message, that's effectively a MAC over the Additional ...


1

You will find a list of Approved security functions (message authentication among them) here on the NIST website (FIPS 140-2 Annex A: Approved Security Functions): http://csrc.nist.gov/publications/fips/fips140-2/fips1402annexa.pdf Interestingly in this document #1 (Triple-DES) references FIPS 113, which leads me to believe the method in FIPS 113 is valid ...


1

The NIST site http://csrc.nist.gov/publications/PubsFIPSArch.html lists FIPS 113 as Withdrawn: Sep 2008. The Federal Register https://www.federalregister.gov/articles/2005/07/15/05-13992/proposed-withdrawal-of-ten-10-federal-information-processing-standards-fips gives a reason: FIPS 113, Computer Data Authentication, specifies an algorithm for ...



Top 50 recent answers are included