FIPS compliant KDFs

["Barry Fussell \(bfussell\) via openssl-users" <openssl-users@xxxxxxxxxxx>]

Before submitting a PR, is there any interest in FIPS compliant KDF implementations for SRTP, SNMP and/or IKEv2

for a future release of OpenSSL ?

 

We maintain an implementation of each of those KDFs and have taken them through FIPS validation using a fork of OpenSSL 3.0.

 

Cryptographic Algorithm Validation Program | CSRC (nist.gov)

 

Thanks,

 

Barry