search

DSC-iTC / cPP

Dedicated Security Components cPP & SD
MIT License
3 stars 3 forks source link

CCDB GE/040 - Section 4.1.1.1.3 #82

Closed woodbe closed 1 month ago

woodbe commented 1 year ago

Para 475

Comment:

"len(q) + 64 bit output of RBG, followed by a mod q-1 operation and a +1 operation, where 1<= x<=q-1.":

I cannot find the passage where the above test is derived in the standard "FIPS 186-4 Elliptic Curve Digital Signature Algorithm Validation System (ECDSA2VS), Updated 18 Mar 2014, Section 6".

Paragraph 471 states: "These tests are derived from The FIPS 186-4 Elliptic Curve Digital Signature Algorithm Validation System (ECDSA2VS), Updated 18 Mar 2014, Section 6.":

From where does this information come from?

"len(q) + 64 bit output of RBG, followed by a mod q-1 operation and a +1 operation, where 1<= x<=q-1.":

I cannot find the passage where the above test is derived in the standard "FIPS 186-4 Elliptic Curve Digital Signature Algorithm Validation System (ECDSA2VS), Updated 18 Mar 2014, Section 6".

Paragraph 471 states: "These tests are derived from The FIPS 186-4 Elliptic Curve Digital Signature Algorithm Validation System (ECDSA2VS), Updated 18 Mar 2014, Section 6.":

From where does this information come from?

Proposal:

Priority: 1

woodbe commented 1 year ago

Similar to #79

yiatsec commented 1 year ago

Paragraph 475 is derived from FIPS 186-4 Appendix B.1. To address the comment, we can add this reference to paragraph 471 as the following: "These tests are derived from FIPS 186-4 Appendix B.1 (July 19, 2013) and The FIPS 186-4 Elliptic Curve Digital Signature Algorithm Validation System (ECDSA2VS), Updated 18 Mar 2014, Section 6."

The same caveat as in #79 applies here. FIPS 186-4 is superseded by FIPS 186-5, but ECDSA2VS refers to FIPS 186-4, and it won't be updated to reflect FIPS 186-5.

woodbe commented 1 year ago

move to v1.1

woodbe commented 1 month ago

Closed by #353