wbrawner/openssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add "wishlist" of desired but possibly unobtainable fixes/improvements

Browse source 
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Stephen Henson <steve@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/4208)
This commit is contained in:
Steve Marquess 2017-08-21 15:57:25 -04:00
parent d674242a88
commit fe36a69847
1 changed files with 31 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

31
README.wishlist Normal file
View file

@ -0,0 +1,31 @@
A "wish list" of changes we'd like to make to the FIPS module if we could.
Note the CMVP requires retesting of all previously tested platforms
("Operational Environments") to implement any changes considered "cryptographically
significant". Since the OpenSSL FIPS module v2.0 has some 250 such formally
tested platforms (and counting), retesting just isn't logistically or economically
feasible.
--------
https://github.com/openssl/openssl/pull/4157
From 2017-08-14, Fix GCM MAC computation for AES-GCM by srahul123
cryptographically significant, not fixable
--------
Andy Polyakov: harmonize with __thumb__ clause in FIPS_ref_point() (#3354),
https://patch-diff.githubusercontent.com/raw/openssl/openssl/pull/3354.patch
https://github.com/openssl/openssl/pull/3354#pullrequestreview-36086406
May be possible to introduce in future change letter
--------
CVE-2016-0701
cryptographically significant, not fixable
--------
CVE-2014-0076
cryptographically significant, not fixable
--------
"Lucky 13", CVE-2013-0169
cryptographically significant, not fixable
--------