3
$\begingroup$

NIST algorithms include ECDH and ECDSA. NIST also specifies curves. Is the use of NIST curves required for FIPS certification or could other curves theoretically be certified if someone were willing to do the work?

$\endgroup$
  • 7
    $\begingroup$ I think algorithms certified by FIPS 140-2 need to have either their own FIPS or must be (in) a NIST SP. I don't think Curve25519 / Ed25519 have any such standards from NIST (yet). Rumours suggest this will change. However, you can get your implementation certified for P-256 and make it generic so that you can also run Curve25519 on it. $\endgroup$ – SEJPM Aug 21 '17 at 14:19
  • 1
    $\begingroup$ NIST claimed in late 2017 that the upcoming draft of NIST SP 800-186 would include Curve25519 and Curve448 as approved curves, and the X25519 and X448 DH functions would be considered for the next revision to NIST SP 800-56A: csrc.nist.gov/News/2017/… Unclear whether this will cover the Ed25519 and Ed448 signature schemes; unclear what the status of the alleged NIST SP 800-186 draft; no mention of this in NIST SP 800-56A rev. 3 form April 2018. $\endgroup$ – Squeamish Ossifrage Feb 28 at 7:29

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.