Quantcast
Channel: Security forum
Viewing all articles
Browse latest Browse all 12072

Kerberos encryption algorithms in FIPS 140-2 compliant mode.

$
0
0
Windows Vista/7/Server 2008/R2 support 
AES256-CTS-HMAC-SHA1-96 and AES128-CTS-HMAC-SHA1-96
for Kerberos in FIPS 140-2 compliant mode.

However, AES-CTS itself is not listed in NIST FIPS140-2 approved algorithms.
http://csrc.nist.gov/groups/ST/crypto_apps_infra/csor/algorithms.html#AES

Could you let us know
AES256-CTS-HMAC-SHA1-96 and AES128-CTS-HMAC-SHA1-96 are FIPS140-2 compliant or not ?

If the answer is no, which encryption algorithms for Kerberos are available in FIPS140-2 compliant mode.

Thanks. 

Viewing all articles
Browse latest Browse all 12072

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>