On Wed, Jan 15, 2014, Leon Brits wrote: > Hi all, > > I am required to implement the four DRBGs specified in SP 800-90 (HASH, > HMAC, CTR, DUAL_EC). I previously received help from this group on that and > it works just fine. The client however also required the following "...and > ANS X9.62-2005 (HMAC)" on the randomness. I am unsure on how to enforce this > via the API. What I did was to use the NID_X9_62_prime256v1 curve on the > DUAL_EC DRBG. Is this ok? I am confused since the requirement states in > brackets at the end: HMAC. > > Can anybody direct me to something I should have read. Unfortunately I do > not have access to the X9 specs. >
Although X9.62-2005 mainly concerns ECC it also includes a DRBG which is equivalent to the HMAC DRBG of SP800-90, so it's the HMAC DRBG they want. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org
