RE: FIPS verification for AES XTS

2013-11-26 Thread Leon Brits
I also need to test CCM and GCM mode and realized that I cannot use the CLI for that. So, I started writing a program to do the tests (wanted to avoid this). The XTS works with the data from the one file, but I still do not understand how to make use of the data unit sequence number - anybody!?

Re: FIPS verification for AES XTS

2013-11-26 Thread Steve Marquess
On 11/25/2013 05:51 AM, Leon Brits wrote: Hi, I need to perform some Known-Answer-Tests with every start-up of my system. ... You're trying for your own private label validation. The OpenSSL FIPS Object Module was a good model for that (by design), but note the CMVP has recently introduced

FIPS verification for AES XTS

2013-11-25 Thread Leon Brits
Hi, I need to perform some Known-Answer-Tests with every start-up of my system. For this I use the NIST KAT files. However for AES-XTS, one of the files uses the tweak value input of data unit sequence number. Can anybody help me to understand howto use that value from the commandline. The