Re:The DNSSEC master key securing DNS is about to change
by CiPHPerCoder on Monday August 29, 2016 @11:32AM
(#12382541)
> that the hardware involved in the actual key rollover complies to the highest level specified by FIPS-140 (presumably actually FIPS-140-2).
Eww, FIPS-140-2.
FIPS-140 compliance isn't a selling point. It's more of a genetic marker than anything. Most of the time, it signals to hackers, "we value standards compliance over security."
Did you know that ECB mode is FIPS-140-2 approved, but AEAD modes (i.e. what you should be using to encrypt) such as GCM and OCB are not?
Eww, FIPS-140-2.
FIPS-140 compliance isn't a selling point. It's more of a genetic marker than anything. Most of the time, it signals to hackers, "we value standards compliance over security."
Did you know that ECB mode is FIPS-140-2 approved, but AEAD modes (i.e. what you should be using to encrypt) such as GCM and OCB are not?
Yes, that ECB mode. https://blog.filippo.io/the-ecb-penguin/