0

I'm specifically concerned with EdDSA being made FIPS compliant, which I realize might take longer with the concerns raised with ECDSA, but I'm curious what the process actually is.

Is it all internal to NIST with just the Public Comment Period being the only transparency we get in the process?

joshhemphill
  • 111
  • 3

1 Answers1

1

If I'm not mistaken, starting last June, all testing was to go through NIST's Automated Cryptographic Validation Protocol (ACVP).

An overview is available here, and more information is published on GitHub.

I think this provides some transparency into the process, though I'm not sure this is the kind of public/transparency you where asking about.

Cheers,

Jean-François Rioux
  • 589
  • 5
  • 10