xCAT/xNBA: xCAT Network Boot Agent - xNBA - Gitea: Git with a cup of tea

xCAT/xNBA

mirror of https://github.com/xcat2/xNBA.git synced 2026-03-25 15:53:29 +00:00

Go to file

Michael Brown 742e43be05 [rng] Use SHA-256 for Hash_df, and validate the hash function strength

ANS X9.82 Part 4 (April 2011 Draft) Section 13.3.4.2 states that "When
using the derivation function based on a hash function, the output
length of the hash function shall meet or exceed the security strength
indicated by the min_entropy parameter in the Get_entropy_input call",
although this criteria is missing from the pseudocode provided in the
same section.

Add a test for this condition, and upgrade from SHA-1 to SHA-256 since
SHA-1 has an output length of 160 bits, which is insufficient for
generating the (128 * 3/2 = 192) bits required when instantiating the
128-bit strength DRBG.

Signed-off-by: Michael Brown <mcb30@ipxe.org>

2012-03-05 23:51:54 +00:00

contrib

[contrib] Fix rom-o-matic

2012-02-12 13:35:43 +00:00

src

[rng] Use SHA-256 for Hash_df, and validate the hash function strength

2012-03-05 23:51:54 +00:00

COPYING

Initial revision

2005-05-17 16:44:57 +00:00

COPYRIGHTS

[build] Rename gPXE to iPXE

2010-04-19 23:43:39 +01:00

README

[doc] Re-add README file

2010-05-28 00:03:47 +01:00

README

iPXE README File

Quick start guide:

   cd src
   make

For any more detailed instructions, see http://ipxe.org

Languages

C 94.5%

Objective-C 2.1%

Assembly 1.3%

Perl 0.9%

Makefile 0.4%

Other 0.7%