[prev in list] [next in list] [prev in thread] [next in thread] 

List:       wine-devel
Subject:    Re: Question about implementing a test for BCryptGetFipsAlgorithmMode
From:       Juan Lang <juan.lang () gmail ! com>
Date:       2014-09-24 23:16:46
Message-ID: CAP8JoYjeD+QfoJFX7bU-vS+96=9LeYDkjdL3CJcatO=JnbOGYw () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


On Tue, Sep 23, 2014 at 2:47 PM, Kai Blaschke <kai.blaschke@kb-dev.net>
wrote:

> Kai, out of curiosity, is there an app that depends on being able to
>> enable FIPS mode?
>> --Juan
>>
>
> The only real-life implementation I know about using the flag and actually
> implementing FIPS is the MS .NET framework. Any application making use of
> functionality in the System.Security.Cryptography namespace will be limited
> to algorithms allowed in FIPS if the setting is enabled. You can try this
> by enabling FIPS on Windows and playing Terraria, for example. In this
> case, the application depends on FIPS mode being disabled.


I see. In that case, I think you could just leave it disabled all the time,
no? I don't see any sense in pretending to enable FIPS mode, personally.
--Juan

[Attachment #5 (text/html)]

<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Tue, Sep 23, 2014 \
at 2:47 PM, Kai Blaschke <span dir="ltr">&lt;<a href="mailto:kai.blaschke@kb-dev.net" \
target="_blank">kai.blaschke@kb-dev.net</a>&gt;</span> wrote:<br><blockquote \
class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc \
solid;padding-left:1ex"><span class=""><blockquote class="gmail_quote" \
style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> Kai, out of \
curiosity, is there an app that depends on being able to<br> enable FIPS mode?<br>
--Juan<br>
</blockquote>
<br></span>
The only real-life implementation I know about using the flag and actually \
implementing FIPS is the MS .NET framework. Any application making use of \
functionality in the System.Security.Cryptography namespace will be limited to \
algorithms allowed in FIPS if the setting is enabled. You can try this by enabling \
FIPS on Windows and playing Terraria, for example. In this case, the application \
depends on FIPS mode being disabled.</blockquote><div><br></div><div>I see. In that \
case, I think you could just leave it disabled all the time, no? I don&#39;t see any \
sense in pretending to enable FIPS mode, personally.</div><div>--Juan  \
</div></div></div></div>





[prev in list] [next in list] [prev in thread] [next in thread]