QuestionQ86

VerifiedSecurity Architecture and Engineering

Which set of cryptographic algorithms complies with Federal Information Processing Standard (FIPS) Publication 140-2 for non-legacy systems?

Explanation

Non-legacy FIPS-era cryptography requires at least 112 bits of security strength. Finite-field Diffie-Hellman with a 2048-bit modulus, AES with a key length above 128 bits, and DSA with a 2048-bit parameter size meet that threshold. RSA at 1024 bits, finite-field DH at 1024 bits or below, Blowfish, and AES keys below 128 bits do not satisfy it.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!