Timeline for About performance of Smart card for performing 3DES in a MD5 hash
Current License: CC BY-SA 3.0
10 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 17, 2017 at 10:46 | history | edited | CommunityBot |
replaced http://security.stackexchange.com/ with https://security.stackexchange.com/
|
|
| Sep 16, 2012 at 18:06 | answer | added | Thomas Pornin | timeline score: 1 | |
| Sep 16, 2012 at 13:51 | comment | added | David Oliván | Both MD5 and 3DES are requirement of our client. Nothing to do as they are the national standards used for the purpose of the project. | |
| Sep 13, 2012 at 18:11 | history | edited | Rory Alsop♦ | CC BY-SA 3.0 |
edited title
|
| Sep 12, 2012 at 20:42 | comment | added | Steven Alexander | Why are you using MD5? MD5 is broken and should not be used. If it's imposed on you as an outside requirement, do what you have to. Otherwise, use SHA-2. If you're concerned about performance, can you use AES instead of 3DES? AES is faster. | |
| Jun 21, 2012 at 10:51 | comment | added | Ramhound | You need to find out what exactly is required. I would do what logicalscope suggested once you have ALL the facts. Be sure to get those in writting. | |
| Jun 21, 2012 at 8:56 | comment | added | David Oliván | Thanks for the advice. It's not clear with our client if the entire system must be Level 2, as they usually talk about HW (HSM...) and we (integrator) prefer to build a SW pure system, such in my previous question, so a SW system could not be required to be Level 2, client must decide. | |
| Jun 21, 2012 at 8:24 | history | edited | Mark Davidson | CC BY-SA 3.0 |
Spelling
|
| Jun 21, 2012 at 8:06 | comment | added | logicalscope | You have to be very careful about what you are building here. Software level 2 is usually not required or desired due to some specific tie-ins to operating systems and environments. Also, the FIPS crypto boundary will have to necessarily exclude any hardware in order to remain as a pure software-only implementation otherwise you are doing a level 2 hardware or level 1 hybrid (there's no such thing as level 2 hybrid). You may want to consider discussing your needs with a FIPS 140-2 lab or consulting group (disclosure: I represent one such lab). | |
| Jun 21, 2012 at 7:54 | history | asked | David Oliván | CC BY-SA 3.0 |