Demo: 2025-4-23
Prod: 2025-5-9
- New Algorithms (Demo only):
- Ascon / AEAD128 / SP800-232, Ascon / Hash256 / SP800-232, Ascon / XOF128 / SP800-232, and Ascon / CXOF128 / SP800-232 - (Algo / Mode / Revision) - testing for Ascon-based family of algorithms based on the SP 800-232 Initial Public Draft.
- ML-DSA sigGen FIPS204 - Adds two ML-DSA Signature Generation corner cases. The first corner case assumes an implementation strictly adheres to the pseudocode in FIPS 204 and tests the four defined rejection paths. The second corner case tests whether an IUT is able to compute a signature when a significant number of rejections, specifically, 64, have occurred. See https://pages.nist.gov/ACVP/draft-celi-acvp-ml-dsa.html#name-ml-dsa-siggen-test-types for more information. These corner case tests are only available for IUTs that advertise support for: 1) testing the internal signature interface; 2) being able to compute mu internal to the algorithm implementation (some implementations may not be able to compute mu internally. They may require mu to be pre-computed and passed as an argument to the implementation.); 3) deterministic signature generation; and 4) must support computing signatures of messages that are 256 bits in length.
- Sample JSON files
- Updates the LMS keyGen 1.0, LMS sigGen 1.0, and LMS sigVer 1.0 sample JSON files to include test cases for all LMS modes instead of for a representative subset of the modes.
- DetECDSA sigGen FIPS186-5
- addresses an issue where the signature values recorded in the sample json files were incorrect. The per-message secret numbers used to create the signatures were being generated incorrectly.
- adds extra tests to the sample JSON files that purposefully use small values for the private key. The use of small values for the private keys forces implementations to demonstrate that the private keys are being converted to octet strings and padded to the correct lengths as part of computing the per-message secret number.
- #377
- ECDSA sigGen 1.0, ECDSA sigGen FIPS186-5, and DetECDSA sigGen FIPS186-5 - Addresses issue where values used for k were not included in the InternalProjection json files
- Adds two new implementation/module types: softwarehybrid and firmwarehybrid. See https://pages.nist.gov/ACVP/draft-fussell-acvp-spec.html#name-modules.