I'm specifically concerned with EdDSA being made FIPS compliant, which I realize might take longer with the concerns raised with ECDSA, but I'm curious what the process actually is.

Is it all internal to NIST with just the Public Comment Period being the only transparency we get in the process?


If I'm not mistaken, starting last June, all testing was to go through NIST's Automated Cryptographic Validation Protocol (ACVP).

An overview is available here, and more information is published on GitHub.

I think this provides some transparency into the process, though I'm not sure this is the kind of public/transparency you where asking about.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.