Am Freitag, dem 21.05.2021 um 16:13 +0800 schrieb Herbert Xu:

On Fri, May 21, 2021 at 04:08:10PM +0800, Hui Tang wrote:


Stephan, can you confirm that both ecdh-nist-p192 and ecdsa-nist-p192
should be disabled in FIPS mode?

Confirmed with the following caveat: sigver is allowed due to legacy
considerations. Siggen / ECDH is only allowed for curves P-224 and higher.

As we introduce ECDSA today, I would not consider a legacy mode and thus
disable P-192.

Ciao
Stephan