cryptoadm(1M) enhancement for FIPS-140 mode [PSARC/2009/347 FastTrack timeout 06/17/2009]
Hai-May Chao
Hai-May.Chao at sun.com
Wed Jun 10 15:39:11 PDT 2009
Scott Rotondo wrote:
>>>
>>> 4.3 Interfaces:
>>>
>>> The following new options are added to cryptoadm(1M) sub-commands
>>> cryptoadm list fips-140
>>> cryptoadm enable fips-140
>>> cryptoadm disable fips-140
>
> Very minor issue: People often refer informally to "FIPS mode" rather
> than the more cumbersome FIPS 140 or FIPS 140-2. Unless you expect
> other FIPS standards to apply to the crypto framework, maybe you could
> save users a little typing:
>
> cryptoadm list fips
> cryptoadm enable fips
> cryptoadm disable fips
>
> I don't feel strongly about this; just a suggestion.
>
> Scott
>
Hi Scott,
We had "fips" originally, and decided to change it to "fips-140" as we have
other FIPS standard like 186 used in framework.
Hai-May
More information about the opensolaris-arc
mailing list