Bug 2005021

Summary:	add SHAKE-256 support and enable it where appropriate
Product:	Red Hat Enterprise Linux 9	Reporter:	Alexander Sosedkin <asosedki>
Component:	crypto-policies	Assignee:	Alexander Sosedkin <asosedki>
Status:	CLOSED ERRATA	QA Contact:	Ondrej Moriš <omoris>
Severity:	low	Docs Contact:
Priority:	medium
Version:	9.0	CC:	omoris
Target Milestone:	rc	Keywords:	Triaged
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	crypto-policies-20220203-1.gitf03e75e.el9	Doc Type:	No Doc Update
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2022-05-17 15:54:31 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Alexander Sosedkin 2021-09-16 15:00:04 UTC

Description of problem:

crypto-policies doesn't have a control for SHAKE-256.
SHAKE-256 is used as part of Ed448.
Allowlisting means Ed448 cannot be used now in gnutls.
SHAKE-256 should be allowlisted explicitly for gnutls
and considered for all other backends.
(see bz1983676 for more context)

Comment 9 errata-xmlrpc 2022-05-17 15:54:31 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (new packages: crypto-policies), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:3953