Re: Question about NIST listing

[Philip Rowlands]

On Sun, 8 Jan 2006, David Highley wrote:

> Is it in the plans for running the SHA2 tests to get the sha256sum
> sha384sum and sha512sum programs listed as tested on the NIST site?

Probably not. I don't recall any mention of such validation in my time 
following this mailing list, and there's nothing similar that I can see 
in the TODO file.

To clarify, are you asking for coreutils' SHA implementation to be 
validated in accordance with SHAVS [1], to appear in the SHS Validation 
List [2]?

> We have a need for them to be listed. Thank you.

It seems, from a quick skim of the NIST site, that implementations must 
be tested by an approved lab. As I doubt such certification is free, a 
sponsor would likely be needed.



Cheers,
Phil

[1] http://csrc.nist.gov/cryptval/shs/SHAVS.pdf
[2]http://csrc.nist.gov/cryptval/shs/shaval.htm