Bug 1373183
| Summary: | Add FIPS XTS key verification (encryption and tweak key must be different) | |||
|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Tomas Mraz <tmraz> | |
| Component: | openssl | Assignee: | Tomas Mraz <tmraz> | |
| Status: | CLOSED ERRATA | QA Contact: | Stefan Dordevic <sdordevi> | |
| Severity: | high | Docs Contact: | Mark Flitter <mflitter> | |
| Priority: | high | |||
| Version: | 7.3 | CC: | jreznik, mflitter, mgrepl, sdordevi, szidek, tmraz | |
| Target Milestone: | rc | |||
| Target Release: | --- | |||
| Hardware: | Unspecified | |||
| OS: | Unspecified | |||
| Whiteboard: | ||||
| Fixed In Version: | openssl-1.0.2k-1.el7 | Doc Type: | Enhancement | |
| Doc Text: |
Ensure that AES-XTS support is compliant
The current guidance for FIPS 140-2 validation has added the requirement to check whether both parts of the XTS key are different. This has been implemented.
|
Story Points: | --- | |
| Clone Of: | ||||
| : | 1432994 (view as bug list) | Environment: | ||
| Last Closed: | 2017-08-01 18:16:10 UTC | Type: | Bug | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | ||||
| Bug Blocks: | 1367490, 1377248 | |||
|
Description
Tomas Mraz
2016-09-05 12:40:48 UTC
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2017:1929 |