Subject: [hackathon] Automated Cryptographic Validation Protocol (ACVP) at IETF 104

From: "Celi, Christopher T. (Fed)" <[email-masked]>
Date: Wed, 13 Mar 2019 15:49:30 +0000

Hi all,

In Prague, we plan on bringing forth a protocol we have in the works. The Automated Cryptographic Validation Protocol (ACVP) has a server implementation by NIST and several client implementations, one notably by Cisco (https://github.com/cisco/libacvp). The protocol provides an extensible framework for algorithm testing which is required by various validation bodies. A validation body (such as NIST) would host an ACVP-compliant server and allow clients to receive validations at their own pace, on demand. At the hackathon, colleagues from Cisco and myself from NIST, plan on implementing an AES-GCM-SIV extension on the server and clients to allow for validation-style testing.

We have drafts available at:

https://datatracker.ietf.org/doc/draft-fussell-acvp-spec/
The above defines the base protocol for server-client interactions.

https://datatracker.ietf.org/doc/draft-vassilev-acvp-iana/
The above defines a request to IANA for managing standardized algorithm names.

https://datatracker.ietf.org/doc/draft-celi-block-ciph/
The above defines several symmetric block cipher algorithms in the outlined protocol.

We look forward to sharing ACVP with everyone at 104.

Thanks,
Chris Celi