diff options
| author | Daiki Ueno <ueno@gnu.org> | 2020-06-26 10:21:26 +0200 |
|---|---|---|
| committer | Daiki Ueno <ueno@gnu.org> | 2020-08-31 08:12:54 +0200 |
| commit | 07c80a2d677e9bebeaab0974deca21693fb173f6 (patch) | |
| tree | 5649e5379af9508e9738081b3dca24cd2dccb561 /doc/credentials/dhparams/rfc7919-ffdhe2048.pem | |
| parent | f643e418e5e5220fe2e332c99275808229ce59ae (diff) | |
| download | gnutls-07c80a2d677e9bebeaab0974deca21693fb173f6.tar.gz | |
dhe: check if DH params in SKE match the FIPS approved algorithms
SP800-56A rev. 3 restricts the FIPS compliant clients to use only
approved DH parameters, defined in RFC 7919 and RFC 3526. This adds a
check in the handling of ServerKeyExchange if DHE is negotiated.
Signed-off-by: Daiki Ueno <ueno@gnu.org>
Diffstat (limited to 'doc/credentials/dhparams/rfc7919-ffdhe2048.pem')
| -rw-r--r-- | doc/credentials/dhparams/rfc7919-ffdhe2048.pem | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/doc/credentials/dhparams/rfc7919-ffdhe2048.pem b/doc/credentials/dhparams/rfc7919-ffdhe2048.pem new file mode 100644 index 0000000000..9b182b7201 --- /dev/null +++ b/doc/credentials/dhparams/rfc7919-ffdhe2048.pem @@ -0,0 +1,8 @@ +-----BEGIN DH PARAMETERS----- +MIIBCAKCAQEA//////////+t+FRYortKmq/cViAnPTzx2LnFg84tNpWp4TZBFGQz ++8yTnc4kmz75fS/jY2MMddj2gbICrsRhetPfHtXV/WVhJDP1H18GbtCFY2VVPe0a +87VXE15/V8k1mE8McODmi3fipona8+/och3xWKE2rec1MKzKT0g6eXq8CrGCsyT7 +YdEIqUuyyOP7uWrat2DX9GgdT0Kj3jlN9K5W7edjcrsZCwenyO4KbXCeAvzhzffi +7MA0BM0oNC9hkXL+nOmFg/+OTxIy7vKBg8P+OxtMb61zO7X8vC7CIAXFjvGDfRaD +ssbzSibBsu/6iGtCOGEoXJf//////////wIBAg== +-----END DH PARAMETERS----- |