1
$\begingroup$

I need to use NIST SP 800-22 approved software / hardware to generate RSA key pair.

Where I can find a list of certified software / hardware RNGs compliant to NIST SP 800-22?

And how is the SP 800-22 related to FIPS 186-x? If I generate RSA key pair with approved software compliant to FIPS 186-x, does it mean that it is also compliant to SP 800-22?

$\endgroup$
4
  • $\begingroup$ According to this page, NIST certifies four DRBG techniques, and no NRBGs. It doesn't seem that they've explicitly certified any implementation. $\endgroup$
    – Polynomial
    Mar 16, 2015 at 14:25
  • $\begingroup$ So how to comply with the following requirement: An approved random number generator that has been certified by an independent laboratory to comply with NIST SP800-22, in connection with RSA key generation? $\endgroup$ Mar 16, 2015 at 14:34
  • $\begingroup$ I would imagine that you'd need to get your implementation certified, in situ within your product. $\endgroup$
    – Polynomial
    Mar 16, 2015 at 14:39
  • $\begingroup$ csrc.nist.gov/groups/STM/cmvp/documents/140-1/140val-all.htm might be relevant. $\endgroup$ Jul 15, 2015 at 18:42

1 Answer 1

1
$\begingroup$

Please refer the document at NIST site pointing to the document (800-22-rev 1a ) updated on April 2010 (http://csrc.nist.gov/publications/nistpubs/800-22-rev1a/SP800-22rev1a.pdf).

The list of special published (SP) documents are available at (http://csrc.nist.gov/publications/PubsSPs.html)

It involves some reading, but should get your answers. Since it will keep changing wouldn't paste an answer here.

$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.