View Issue Details

IDProjectCategoryView StatusLast Update
000213310000-002: Securitypublic2012-11-02 16:22
ReporterRandy Armstrong Assigned ToPaul Hunkar  
PrioritynormalSeverityminorReproducibilityalways
Status closedResolutionfixed 
Fixed in Version1.02 
Summary0002133: Need to state that only validated CryptoAlgorithms will be used.
Description

CSWG feedback - suggestion that the spec state that only validated (by FIPS or other agency) cryptographic suites will be used in future profiles.

TagsNo tags attached.
Commit Version
Fix Due Date

Activities

Paul Hunkar

2012-10-22 23:06

developer   ~0004168

Last edited: 2012-10-23 15:50

Proposed that this be assigned to Part 2 - this was the note I had on this subject

From NIST security review the following suggestion has been made. The specifications describe a robust security policy, but do not indicate if the described security policies are the only security policies. A best practice section should describe that for interoperability clients and server should implement one or more of the selected security policies.

Paul Hunkar

2012-10-25 05:25

developer   ~0004184

Added text reference FIPS document and recommendas as requested

Jim Luth

2012-11-02 16:22

administrator   ~0004188

Reviewed and agreed to changes in 2012-10-30 telecon.

Issue History

Date Modified Username Field Change
2012-07-20 18:34 Randy Armstrong New Issue
2012-07-24 16:47 Matthias Damm Status new => acknowledged
2012-07-24 16:47 Matthias Damm Project 10000-004: Services => Feature Requests
2012-10-22 23:06 Paul Hunkar Note Added: 0004168
2012-10-22 23:07 Paul Hunkar Project Feature Requests => 10000-002: Security
2012-10-23 15:50 Paul Hunkar Note Edited: 0004168
2012-10-25 05:25 Paul Hunkar Status acknowledged => resolved
2012-10-25 05:25 Paul Hunkar Fixed in Version => 1.02
2012-10-25 05:25 Paul Hunkar Resolution open => fixed
2012-10-25 05:25 Paul Hunkar Assigned To => Paul Hunkar
2012-10-25 05:25 Paul Hunkar Note Added: 0004184
2012-11-02 16:22 Jim Luth Status resolved => closed
2012-11-02 16:22 Jim Luth Note Added: 0004188