Use FIPS approved APIs to generate RSA key pairs

corretto / amazon-corretto-crypto-provider

The Amazon Corretto Crypto Provider is a collection of high-performance cryptographic implementations exposed via standard JCA/JCE interfaces.

Apache License 2.0

238 stars 56 forks source link

Closed amirhosv closed 1 year ago

amirhosv commented 1 year ago

Description of changes:

AWS-LC's FIPS approved API only supports RSA keys of sizes 2048, 3072, and 4096; moreover, on F4 as public exponent is supported.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

amirhosv commented 1 year ago

looks good! do we plan on cherry-picking this to main?

Yes