[vc_row][vc_column][vc_column_text]Recent Implementation Guidance (IG) from NIST could impact vendor algorithms. The following overview has been created to summarize those critical dates and associated algorithms.[\/vc_column_text][vc_column_text]AES CBC-CS1, CBC-CS2, CBC-CS3 (IG A.12)<\/span><\/u><\/strong><\/p>\n

\n
• Until Sep. 1, 2020<\/strong>, implementations that claim vendor affirmation to NIST SP 800-38A Addendum A<\/em> will be accepted for submission.<\/li>\n
• After Sep. 1, 2020<\/strong>, only implementations that are CAVP-tested for compliance toNIST SP 800-38A Addendum A<\/em> will be accepted for submission.<\/li>\n<\/ul>\n

  SHAKE and KECCAK-based hash algorithms (IG A.15)<\/u><\/strong><\/p>\n

  \n
  • Until Sep. 1, 2020<\/strong>, implementations that claim vendor affirmation to NIST SP 800-185<\/em> will be accepted for submission.<\/li>\n
  • After Sep. 1, 2020<\/strong>, only implementations that are CAVP-tested for compliance toNIST SP 800-185<\/em> will be accepted for submission.<\/li>\n<\/ul>\n

    PBKDF (IG D.6)<\/u><\/strong><\/p>\n

    \n
    • Until Dec. 31, 2020<\/strong>, implementations that claim vendor affirmation to NIST SP 800-132<\/em> will be accepted for submission.<\/li>\n
    • After Dec. 31, 2020<\/strong>, only implementations that are CAVP-tested for compliance to NIST SP 800-132<\/em> will be accepted for submission.<\/li>\n<\/ul>\n

      Key agreement schemes (IG G.20, IG D.1-rev2, IG D.1-rev3, and IG D.8)<\/u><\/strong><\/p>\n

      \n
      • New submissions (3SUB, 5SUB) with previous NIST SP 800-56A<\/em>-based acceptance scenarios will no longer be accepted after Dec. 31, 2020<\/strong>. These scenarios include, for example, allowances for leveraging a shared secret CVL and a KDF CVL to claim a compliant KAS.<\/li>\n
      • Implementations under the previous NIST SP 800-56A<\/em>-based acceptance scenarios will no longer be acceptable for use in FIPS mode after Dec. 31, 2021<\/strong>.\n
        \n
        • CVL certificates used to claim compliance for key agreement schemes will become obsolete after Dec. 21, 2021<\/strong>.<\/li>\n
        • New submissions with these CVL certificates will not be accepted after Dec. 21, 2021<\/strong>.<\/li>\n
        • Modules with claims of compliance to NIST SP 800-56A<\/em> or NIST SP 800-56Arev2<\/em> will be moved to the Historical List effective Jan 1, 2022<\/strong>.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
          \n
          • Until Dec. 31, 2020<\/strong>, implementations that claim vendor affirmation to NIST SP 800-56Arev3<\/em> will be accepted for submission.<\/li>\n
          • After Dec. 31, 2020<\/strong>, only implementations that are CAVP-tested for compliance toNIST SP 800-56Arev3 <\/em>will be accepted for submission.<\/li>\n<\/ul>\n

            Key transport schemes (IG D.9)<\/u><\/strong><\/p>\n

            \n
            • RSA-based implementations that claim compliance to NIST SP 800-56Brev3<\/em> will require CAVP testing after Dec. 31, 2020<\/strong>.<\/li>\n
            • New submissions (3SUB, 5SUB) with RSA-based implementations that are vendor-affirmed to NIST SP 800-56B<\/em> will no longer be accepted after Dec. 31, 2020<\/strong>.<\/li>\n
            • RSA-based implementations that are vendor-affirmed to NIST SP 800-56B<\/em> will be disallowed after Dec. 31, 2023<\/strong>.<\/li>\n
            • Non-compliant implementations of RSA key wrap will be allowed until Dec. 31, 2023<\/strong>.<\/li>\n
            • New submissions (3SUB, 5SUB) with non-compliant implementations of RSA key wrap will no longer be accepted after Dec. 21, 2020<\/strong>.<\/li>\n<\/ul>\n

              Key derivations schemes (IG D.10)<\/u><\/strong><\/p>\n

              \n
              • Vendors may continue to claim vendor affirmation to NIST SP 800-56Crev1<\/em> thru Dec. 31, 2020<\/strong>.<\/li>\n
              • Implementations that claim compliance to NIST SP 800-56Crev1<\/em> will require CAVP testing after Dec. 31, 2020<\/strong>.<\/li>\n<\/ul>\n

                [\/vc_column_text][vc_column_text]Need Support?<\/strong><\/p>\n

                Contact Corsec<\/a><\/span> to discuss your resolution path and determine if you need to take action for your validation.[\/vc_column_text][vc_column_text]<\/p>\n

                <\/div>\n

                \n

                \n

                ###<\/p>\n<\/div>\n<\/div>\n

                [\/vc_column_text][vc_separator color=”black”][\/vc_column][\/vc_row][vc_row][vc_column][vc_row_inner][vc_column_inner width=”1\/2″][vc_column_text]<\/p>\n

                \n

                Connect With Us:<\/a><\/strong><\/h5>\n

                Stay up to date with Corsec as we bring you all the most recent updates to the standards, certifications, and requirements \u2013\u00a0Subscribe<\/span><\/a><\/p>\n<\/div>\n

                [\/vc_column_text][\/vc_column_inner][vc_column_inner width=”1\/2″ css=”.vc_custom_1586536412535{margin-left: 20px !important;}”][vc_column_text]<\/p>\n

                \n

                Press Contact:<\/strong><\/h5>\n

                Jake Nelson<\/a><\/span>
                \nCorsec Director of Marketing
                \njnelson@corsec.com<\/p>\n<\/div>\n

                [\/vc_column_text][\/vc_column_inner][\/vc_row_inner][vc_column_text]<\/p>\n

                <\/a>\u00a0 \u00a0 \u00a0 \u00a0 \u00a0<\/a><\/div>\n

                [\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"

                [vc_row][vc_column][vc_column_text]Recent Implementation Guidance (IG) from NIST could impact vendor algorithms. The following overview has been created to summarize those critical dates and associated algorithms.[\/vc_column_text][vc_column_text]AES CBC-CS1, CBC-CS2, CBC-CS3 (IG A.12) Until Sep. 1, 2020, implementations that … <\/p>\n

                Read more<\/a><\/p>\n","protected":false},"author":2,"featured_media":18302,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[211,5,201,91],"tags":[87,4,94,136,95,39],"class_list":["post-18729","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-algorithm-testing","category-fips-140-2","category-fips-140-3","category-security","tag-industry-updates","tag-fips-140-2","tag-fips-140-3","tag-nist","tag-security","tag-security-certifications","infinite-scroll-item","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-50","no-featured-image-padding"],"yoast_head":"\n