Suite B - Revision history

Tom: /* MSFT Suite B Support */

2024-11-11T01:15:10Z

‎MSFT Suite B Support

Tom at 05:36, 8 February 2023

2023-02-08T05:36:11Z

Tom: /* MSFT Suite B Support */

2022-11-09T23:48:13Z

‎MSFT Suite B Support

Tom: /* Solutions */

2022-11-09T23:45:22Z

‎Solutions

Tom: /* References */

2022-11-09T23:44:06Z

‎References

Tom: /* CNSA version 1.0 */

2022-10-15T21:09:09Z

‎CNSA version 1.0

Tom: /* CNSA version 2.0 */

2022-10-15T21:05:34Z

‎CNSA version 2.0

Tom: /* CNSA version 2.0 */

2022-10-15T21:01:49Z

‎CNSA version 2.0

Tom: /* Replacements */

2022-10-15T21:00:40Z

‎Replacements

Tom: /* Full Title or Meme */

2022-10-06T21:55:22Z

‎Full Title or Meme

@@ Line 47: / Line 47: @@
 Suite B cryptography recommends use of elliptic curve Diffie-Hellman (ECDH) in many existing protocols such as the Internet Key Exchange (IKE, mainly used in IPsec), transport layer security (TLS), and Secure MIME (S/MIME).
-CNG includes support for Suite B that extends to all required algorithms: AES (all key sizes), the SHA-2 family (SHA-256, SHA-384 and SHA-512) of hashing algorithms, ECDH, and elliptic curve DSA (ECDSA) over the NIST-standard prime curves P-256, P-384, and P-521. Binary curves, Koblitz curves, custom prime curves, and elliptic curve Menezes-Qu-Vanstone (ECMQV) are not supported by the Microsoft algorithm providers included with Windows Vista.
+CNG includes support for Suite B that extends to all required algorithms: AES (all key sizes), the SHA-2 family (SHA-256, SHA-384 and SHA-512) of hashing algorithms, ECDH, and elliptic curve DSA ([[ECDSA]]) over the NIST-standard prime curves P-256, P-384, and P-521. Binary curves, Koblitz curves, custom prime curves, and elliptic curve Menezes-Qu-Vanstone (ECMQV) are not supported by the Microsoft algorithm providers included with Windows Vista.
 ===Auditing===

@@ Line 13: / Line 13: @@
 saying that "the growth of elliptic curve use has bumped up against
 the fact of continued progress in the research on [[Quantum Computing Threat]],
-which has made it clear that elliptic curve cryptography is not the
+which has made it clear that [[Elliptic Curve Cryptography]] is not the
 long term solution many once hoped it would be."  This gave rise to
 much speculation on possible motives for the switch.  In January, NSA
@@ Line 19: / Line 19: @@
 and called for an effort to standardize quantum-resistant
 cryptographic algorithms.  Earlier this month, NIST published a Report
-on Post-Quantum Cryptography that announces such a standardization
+on Post-Quantum Cryptography that announces such a standardization effort.
-I have written a blog post summarizing last summer's announcement and
+I have written a blog post summarizing last summer's announcement and the FAQs, with links to all the documents.
 The FAQs make sense, but do not explain one detail: why DSA has been

@@ Line 50: / Line 50: @@
 CNG includes support for Suite B that extends to all required algorithms: AES (all key sizes), the SHA-2 family (SHA-256, SHA-384 and SHA-512) of hashing algorithms, ECDH, and elliptic curve DSA (ECDSA) over the NIST-standard prime curves P-256, P-384, and P-521. Binary curves, Koblitz curves, custom prime curves, and elliptic curve Menezes-Qu-Vanstone (ECMQV) are not supported by the Microsoft algorithm providers included with Windows Vista.
 ==References==
 [[Category: Cryptography]]

@@ Line 43: / Line 43: @@
 ==Solutions==
 ===MSFT Suite B Support===
-An important feature of CNG is its support for the Suite B algorithms. In February of 2005, the National Security Agency (NSA) of the United States announced a coordinated set of symmetric encryption, asymmetric secret agreement (also known as key exchange), digital signature and hash functions for future U.S. government use called Suite B. The NSA has announced that certified Suite B implementations can and will be used for the protection of information designated as Top Secret, Secret, and private information that, in the past was described as Sensitive-But-Unclassified. Because of this, Suite B support is very important to application software vendors and system integrators as well as to Microsoft.
+An important feature of [https://learn.microsoft.com/en-us/windows/win32/seccng/about-cng CNG] is its support for the Suite B algorithms. In February of 2005, the National Security Agency (NSA) of the United States announced a coordinated set of symmetric encryption, asymmetric secret agreement (also known as key exchange), digital signature and hash functions for future U.S. government use called Suite B. The NSA has announced that certified Suite B implementations can and will be used for the protection of information designated as Top Secret, Secret, and private information that, in the past was described as Sensitive-But-Unclassified. Because of this, Suite B support is very important to application software vendors and system integrators as well as to Microsoft.
 All Suite B algorithms are publicly known. They have been developed outside the scope of the government secrecy historically associated with cryptographic algorithm development. In this same time frame, some European countries and regions have also proposed the same Suite B requirements for protecting their information.

@@ Line 40: / Line 40: @@
 Web site: https://pomcor.com
 </pre>
 ==References==
 [[Category: Cryptography]]

@@ Line 31: / Line 31: @@
 that was present in Suite B.  Surprisingly, this comes at a time when
 forward secrecy is becoming the norm on the web.
 <pre>
 Francisco Corella, PhD
 Phone: +1.619.770.6765
 Email: fcorella@pomcor.com

@@ Line 4: / Line 4: @@
 ==Replacements==
 ===CNSA version 2.0===
-* [https://media.defense.gov/2022/Sep/07/2003071834/-1/-1/0/CSA_CNSA_2.0_ALGORITHMS_.PDF ed the “Commercial National Security Algorithm Suite 2.0”] (CNSA 2.0) Cybersecurity Advisory (CSA)}. 2022-09
+* [https://media.defense.gov/2022/Sep/07/2003071834/-1/-1/0/CSA_CNSA_2.0_ALGORITHMS_.PDF  the “Commercial National Security Algorithm Suite 2.0”] (CNSA 2.0) Cybersecurity Advisory (CSA)}. 2022-09
 ===CNSA version 1.0===