Hi, According to NIST SP800-131A Table 9, HMAC generation in FIPS must have a keylen of 14 bytes minimum. I've noticed that in the crypto algorithm testing framework, the HMAC test vectors from RFC 4231 all have a test case that utilizes a 4 byte key. Is this permissible when operating the kernel in FIPS mode and if so how is the 14 byte minimum keysize enforced? Thanks, Peter
