Citation please. There are multiple standards that implement PFS in the FIPS spe... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		jnwatson on Sept 5, 2019 \| parent \| context \| favorite \| on: AES-GMAC-CTR (SIV) Citation please. There are multiple standards that implement PFS in the FIPS specs.

Nursie on Sept 5, 2019 [–]

Fair enough, the ones I was involved with implementing/complying with (FIPS 140-2) ruled out things like DH(E) key exchange.

We had to comply with that standard to sell to the federal government at the time.

Things may well have changed.

GhettoMaestro on Sept 6, 2019 | [–]

ECDHE is standard for FIPS these days.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact