Re: [saag] NIST requests comments on using ISO/IEC 19790:2012 as the U.S. Federal Standard for cryptographic modules

I'm not in the US or trading with US companies, so presumably not affected,
but the paywall alone sounds like a reasonable grounds to object to me - it
prevents reasonable review by people with no reason to buy the standard,
and presumably also creates a smaller pool of suppliers (since it will
eliminate those who don't buy the spec).

On Fri, Aug 14, 2015 at 10:14 PM, Stephen Farrell <stephen.farrell@cs.tcd.ie
> wrote:

>
> Hiya,
>
> As an FYI, those of you who are interested in cryptographic
> module APIs would probably be interested in this. [1] (partly
> copied below.)
>
> I'm told the ISO spec is behind a paywall, but haven't gone
> to look and see if there's a version freely available, so
> it's hard to know what kind of change this might represent.
> If someone has more info on that it might be useful to
> share that here.
>
> Cheers,
> S.
>
> []1 http://csrc.nist.gov/news_events/#aug12
>
>
> -----------
>
> NIST requests comments on using ISO/IEC 19790:2012 as the U.S. Federal
> Standard for cryptographic modules
>
> NIST is seeking public comments on using International Organization for
> Standardization/International Electrotechnical Commission (ISO/IEC)
> standards for cryptographic algorithm and cryptographic module testing,
> conformance, and validation activities, currently specified by Federal
> Information Processing Standard (FIPS) 140-2. The National Technology
> Transfer and Advancement Act (NTTAA), Public Law 104-113, directs
> federal agencies to adopt voluntary consensus standards wherever
> possible. The responses to this request for information (RFI) will be
> used to plan possible changes to the FIPS or in a decision to use all or
> part of ISO/IEC 19790:2012, Security Requirements for Cryptographic
> Modules, for testing, conformance and validation of cryptographic
> algorithms and modules.
>
> The **RFI posted in today’s Federal Register provides additional
> background information, including seven questions that NIST is
> especially interested in having addressed, as well as NIST’s intentions.
>
>  Send public comments to: UseOfISO@nist.gov (also see the address for
> sending written comments)
>
> Comment period closes: September 28, 2015
>
> _______________________________________________
> saag mailing list
> saag@ietf.org
> https://www.ietf.org/mailman/listinfo/saag
>