Re: [openssl-users] [FIPS compliance] ssl reneg when counter overflows(AES_GCM)

2016-11-04 Thread Jakob Bohm
On 04/11/2016 09:26, Marcus Meissner wrote: On Fri, Nov 04, 2016 at 10:03:21AM +0530, Akshar Kanak wrote: Dear team as per the documnet http://csrc.nist.gov/groups/ STM/cmvp/documents/fips140-2/FIPS1402IG.pdf page 150 , Its mentioned The implementation of the nonce_explicit

Re: [openssl-users] [FIPS compliance] ssl reneg when counter overflows(AES_GCM)

2016-11-04 Thread Marcus Meissner
On Fri, Nov 04, 2016 at 10:03:21AM +0530, Akshar Kanak wrote: > Dear team > as per the documnet http://csrc.nist.gov/groups/ > STM/cmvp/documents/fips140-2/FIPS1402IG.pdf > page 150 , Its mentioned > The implementation of the nonce_explicit management logic inside the > module shall

[openssl-users] [FIPS compliance] ssl reneg when counter overflows(AES_GCM)

2016-11-03 Thread Akshar Kanak
Dear team as per the documnet http://csrc.nist.gov/groups/ STM/cmvp/documents/fips140-2/FIPS1402IG.pdf page 150 , Its mentioned The implementation of the nonce_explicit management logic inside the module shall ensure that when the nonce_explicit part of the IV exhausts the maximum

[openssl-users] [FIPS compliance] ssl reneg when counter overflows(AES_GCM)

2016-11-03 Thread Akshar Kanak
Dear team as per the documnet http://csrc.nist.gov/groups/STM/cmvp/documents/fips140-2/FIPS1402IG.pdf page 150 , Its mentioned The implementation of the nonce_explicit management logic inside the module shall ensure that when the nonce_explicit part of the IV exhausts the maximum