nShield Security World Ciphersuites
Releases
| Attribute | DLf1024s160mDES3 | DLf1024s160mRijndael | DLf3072s256mRijndael | DLf3072s256mAEScSP800131Ar1 | ECp521mAES |
|---|---|---|---|---|---|
Introduced |
Original |
Old |
v11.50 |
v12.50 |
Forthcoming |
FIPS Firmware Versions |
n/a |
v12.72, v13.2, v13.4 |
forthcoming |
||
Cryptographic Properties
| Attribute | DLf1024s160mDES3 | DLf1024s160mRijndael | DLf3072s256mRijndael | DLf3072s256mAEScSP800131Ar1 | ECp521mAES |
|---|---|---|---|---|---|
Overall Strength |
80 bit |
128 bit |
|||
Internal Cryptography |
Proprietary |
FIPS-140 approved |
|||
Internal Signatures |
DSA-1024 |
DSA-3072 |
ECDSA-P521 |
||
Working Key Blobs |
DES3-CBC Proprietary MAC |
Proprietary KDF |
SP800-108 KDF |
||
Key Recovery |
RSA-1024 |
RSA-SVE-1024 |
RSA-SVE-3072 |
RSA-OAEP-3072 |
ECDH-P521 |
Passphrase Recovery |
RSA-1024 |
RSA-OAEP-3702 |
ECDH-P521 |
||
nCore Configuration
| Attribute | DLf1024s160mDES3 | DLf1024s160mRijndael | DLf3072s256mRijndael | DLf3072s256mAEScSP800131Ar1 | ECp521mAES |
|---|---|---|---|---|---|
FIPS Mode Bits |
FIPS140Level3 |
FIPSLevel3Enforcedv2 + StrictSP80056Ar3 |
|||
KML Type |
DSAp1024s160 |
DSAp3072s256 |
NISTp521hSHA1 |
||
Key Hash |
SHA1 |
||||
KMWK |
DES3 0101… |
AES-256 0000… |
|||
HKMWK |
1d572201be533ebc89f30fdd8f3fac6ca3395bf0 |
c2be99fe1c77f1b75d48e2fd2df8dffc0c969bcb |
|||
FIPS Mode Restrictions
| Attribute | DLf1024s160mDES3 | DLf1024s160mRijndael | DLf3072s256mRijndael | DLf3072s256mAEScSP800131Ar1 | ECp521mAES |
|---|---|---|---|---|---|
Single-DES |
Forbidden |
||||
DES3 Encryption |
Permitted |
Forbidden |
|||
DES3 Decryption |
Permitted |
||||
DES3 MAC |
Permitted |
Forbidden |
|||
RSA Public Modulus |
≥1024 bits |
≥2048 bits |
|||
RSA Public Exponemt |
16-256 bits |
||||
DSA Public Modulus |
≥1024 bits |
≥2048 bits |
|||
DSA Group Order |
≥160 bits |
≥224 bits |
|||
DSA Signature Generation |
Permitted |
Forbidden |
|||
DH Public Modulus |
≥1024 bits |
≥2048 bits |
|||
DH Group Order |
≥160 bits |
≥224 bits |
|||
DH Without Group Order |
Permitted |
Forbidden |
|||
ElGamal |
Forbidden |
||||
ECC Group Order |
≥160 bits |
≥224 bits |
|||
Non-Cofactor ECDH |
Permitted |
Forbidden |
|||
ECIES with XOR encryption |
Forbidden |
||||
ECIES with KDF2 |
Forbidden |
||||
KDF2 in CKDF |
Permitted |
Forbidden |
|||
SHA1 Signature |
Permitted |
Forbidden |
|||
Non-default ICV with AES-KW |
Permitted |
Forbidden |
|||
Non-default ICV with AES-GCM |
Permitted |
Forbidden |
|||
Non-approved hashes with KDFs |
Permitted |
Forbidden |
|||
Unauthenticated key wrapping |
Permitted |
Forbidden |
|||
Private key plaintext import |
Forbidden |
||||
Private key plaintext export |
Forbidden |
||||
Public key plaintext export |
Authentication required |
||||
KCDSA, SEED, ARIA |
Forbidden |
||||