Re: FIPS meets AEAD, AES-nnn-SIV

On Sun, Jun 01, 2025 at 11:23:58PM -0700, Hal Murray wrote:

> I work on NTP software.  NTS (Network Time Security) uses AEAD which uses, 
> for example, AES-128-SIV which uses AES-128-CBC and AES-128-CTR.
>
> We have a package that implements AEAD using the old/deprecated cmac 
> interface.  It was written long before OpenSSL supported AEAD.  I'm 
> looking into fixing our code to use OpenSSL's AEAD routines.
>
> Our old code works on a system running in FIPS mode.  Our new code doesn't 
> because OpenSSL's FIPS provider doesn't support AES-128-SIV.

The OpenSSL FIPS provider supports AES in the GCM and CCM AEAD modes.
The OpenSSL default provider supports AES in SIV and GCM-SIV modes.
Unless I am not looking in the right places, the FIPS provider does
not support SIV.

> Does FIPS know anything about any of the AEAD algorithims?

Yes, GCM and CCM.

> This seems like it should be covered by a FAQ someplace, but all I've 
> found while poking around is that the OpenSSL FIPS provider doesn't 
> support any AEAD algorithims.
> 
> Or what should I be asking?  or thinking about?

I am not aware of a FIPS-approved SIV mode.  See:

    https://csrc.nist.gov/Projects/cryptographic-algorithm-validation-program/cavp-testing-block-cipher-modes

        CMAC (SP 800-38B)
        XTS-AES (SP 800-38E)
        CCM (SP 800-38C)
        KW / KWP / TKW (SP 800-38F)(Key Wrap using AES and Triple-DES)
        GCM / GMAC / XPN (SP 800-38D and CMVP Annex A)

    https://csrc.nist.gov/Projects/block-cipher-techniques/bcm

-- 
    Viktor.

-- 
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/aD1X6wMeZLWNSEF3%40chardros.imrryr.org.