-
Story
-
Resolution: Won't Do
-
Normal
-
None
-
rhel-9.1.0
-
Medium
-
rhel-idm-pki
-
ssg_idm
-
0.1
-
False
-
False
-
-
Yes
-
None
-
None
-
None
-
If docs needed, set a value
-
-
All
-
None
-
57,005
Description of problem:
this is a really wide statement: support FIPS-186-5
we "only" reference and support FIPS-186-4 from July 2013 in the install guide at
"
https://access.redhat.com/documentation/en-us/red_hat_certificate_system/10/pdf/planning_installation_and_deployment_guide/Red_Hat_Certificate_System-10-Planning_Installation_and_Deployment_Guide-en-US.pdf
3.2. ALLOWED KEY ALGORITHMS AND THEIR SIZES
"
FIPS-186-5 has been superseding FIPS-186-4 since October 2019
I do not know all the differences and implications, but this should be explored.
For example, one public sector customer has a requirement for "Edwards-Curve Digital Signature Algorithm" / EdDSA support, which we do not have in NSS.
Version-Release number of selected component (if applicable):
RHCS-10 on RHEL-8
How reproducible:
Steps to Reproduce:
1.
2.
3.
Actual results:
Expected results:
Additional info:
- clones
-
RHEL-9983 [RFE] support FIPS-186-5 (eddsa) (RHCS / NSS)
-
- Planning
-
- external trackers