Demo: 2026-4-16
Prod: TBD
- New Algorithms (Demo only):
- KDF / SPDM / 1.0 (Algo / Mode / Revision) - testing for the SPDM KDF as described in DSP0274, section 12 (see https://www.dmtf.org/dsp/dsp0274).
- The CAVP would like to thank Thomas Bowen for providing the following Pull Request which was instrumental in adding SPDM testing to ACVTS: #405.
- NOTE: Until the KDF SPDM 1.0 documentation becomes available and is posted to https://pages.nist.gov/ACVP/#supported, please consult the sample JSON files located at https://github.com/usnistgov/ACVP-Server/tree/master/gen-val/json-files/KDF-SPDM-1.0/
- XECDH / keyGen / RFC7748, XECDH / keyVer / RFC7748, and XECDH / SSC / RFC7748 (Algo / Mode / Revision) - testing for the curve25519 and curve448 elliptic curves as defined in RFC 7748.
- The CAVP would like to thank Joachim Vandersmissen who contributed the XECDH / RFC7748 testing. See #391.
- KDF / SPDM / 1.0 (Algo / Mode / Revision) - testing for the SPDM KDF as described in DSP0274, section 12 (see https://www.dmtf.org/dsp/dsp0274).
- Ascon AEAD128 SP800-232
- Fixes bit-oriented tags on Ascon AEAD128 by reversing the bit order on incomplete bytes in the tag.
- Adds encryption and decryption tests to Ascon AEAD128 for tags that are not the minimum or maximum of the domain.
- Addresses #434
- HMAC-SHA* 1.0 algorithms - Fixes HMAC 1.0 MAC validation for the scenario where the
macsupplied result is a different length than expected. Previously, if the suppliedmacwas longer than the requestedmacLen, assuming the full value was still correct, this was accepted by ACVTS. Now it will be rejected. The suppliedmacmust be exactly themacLenrequested. - RSA keyGen FIPS186-5
- Improves error handling for when missing or invalid values are supplied for bitLens in the response.
- Fixes "General exception. Contact service provider" error that occurs when
infoGeneratedByServer = false, isSample = false, randPQ = ProbableWithProvableAux
- RSA signaturePrimitive 1.0 - fixes a Null Reference Exception that occurs when validating a response where the supplied value for "testPassed" is "true", but "false" is expected.
- Improves error handling for the scenario where a Domain type is expected, but omitted from a registration.