Skip to content

v1.1.0.18

Compare
Choose a tag to compare
@Kritner Kritner released this 26 May 17:48
· 31 commits to master since this release
408bdf3

Demo: 2021-05-26
Prod: 2021-06-09

Algorithms:

  • HMAC
    • update generation for better coverage of registered domains
    • HMAC always include min/max from domain
  • KAS KDFs max z len correction 65336 -> 65536
  • asni x9.42
    • updates parameter validation to ensure at least one valid type included
    • update properties to be on the byte boundary
  • KAS 1.0
    • KdfNoKc update label in expected/actual from "tag" -> "hashZ"
    • ensure that key confirmation object is provided for key confirmation option
    • Adds 104 bits as valid nonce length for AES-CCM
  • KAS IFC corrects issue where failing test not introduced for val test group
  • Disables modulo 1024 for RSA KeyGen 1.0
  • RSA KeyGen correction to validator when RSA key aux values don't meet appropriate lower bounds
  • DRBG update max testable bitlength from 1024 -> 65536
  • CMAC removes keylen projection from prompt file for TDES vectors
  • KDF Update keyIn length to be equal to the output of the aux function
  • GCM write out IV in prompt file only when "external" for encrypt operations, or always for decrypt
  • Updates IsSample for CTR modes so that the size of the messages is the same on every environment
  • KTS for ktsMethod validate that if !supportsNullAssociatedData, that a valid associatedDataPattern is present.
  • SHAKE parameter validation update to check for outputLen property

Public Web:

  • Previously, would return "retry" objects indefinitely if attempting to pull vector set json that had already been archived through archival process (expiration or certification). Now returning an "archived" object rather than retry object for this scenario.
  • HealthCheck endpoint
  • Version endpoint