Profile

> > >NIST SP 800-90 Dual EC DRBG. > There are some people who use this algorithm. As such, I don't think > removing it outright is the correct thing to do. [ ] Peter -- quite right and let me rephrase my suggestion -- it is clear that the next version of SP800-90A will *not* include a definition of Dual ...

If we added the following into RNG Parameters that would cover off on what is currently noted in the validation lists: Prediction Resistance Enabled - Boolean Derivation Function Used - Boolean [ ] I think adding just those two functions is useful. Observation: Prediction resistance applies to all SP800-90(A) ...

Tim, I was merely responding to your comment on Peter's recommendation to support prediction resistance, which was: " We haven't seen any NIST indication as yet that this will be included in the RNG testing. It can be added if this is of interest and you see a use case for it. ". I found your assertion ...

Tim, Good points -- just a couple of follow up comments below. Bob > > A common PRNG parameter which is not able to be specified in the current > proposal is Prediction Resistance. This is the combining of one bit of entropy > with each output bit. This can be on or off. This is discussed in detail in ...

Oscar, Similar to my previous comment, I think section 2.1.21 in this update is unnecessary. If it remains you will have to ensure that the list of affected mechanisms is deterministic. Thanks, Bob From: pkcs11@lists.oasis-open.org [mailto:pkcs11@lists.oasis-open.org] On Behalf Of Oscar So Sent: Wednesday, ...