FIPS meets AEAD, AES-nnn-SIV

Could somebody please give me a lesson in FIPS and AEAD or a pointer to 
the right place?

I work on NTP software.  NTS (Network Time Security) uses AEAD which uses, 
for example, AES-128-SIV which uses AES-128-CBC and AES-128-CTR.

We have a package that implements AEAD using the old/deprecated cmac 
interface.  It was written long before OpenSSL supported AEAD.  I'm 
looking into fixing our code to use OpenSSL's AEAD routines.

Our old code works on a system running in FIPS mode.  Our new code doesn't 
because OpenSSL's FIPS provider doesn't support AES-128-SIV.

Does FIPS know anything about any of the AEAD algorithims?

What do FIPS shops do when they want to use a protocol that uses an AEAD 
algorithm?  Do we just say "no" to them?

This seems like it should be covered by a FAQ someplace, but all I've 
found while poking around is that the OpenSSL FIPS provider doesn't 
support any AEAD algorithims.

Or what should I be asking?  or thinking about?

Thanks.


-- 
These are my opinions.  I hate spam.



-- 
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/20250602062358.8AF4F620138%40107-137-68-211.lightspeed.sntcca.sbcglobal.net.