<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=windows-1252">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 07/01/2016 23:06, jonetsu wrote:<br>
</div>
<blockquote class=" cite"
id="mid_1452204414669_62074_post_n7_nabble_com"
cite="mid:1452204414669-62074.post@n7.nabble.com" type="cite">
<pre wrap="">Does this mean that running 1.01e in FIPS mode is protected regarding this
SLOTH attack ?
</pre>
</blockquote>
<tt>Does FIPS mode prevent use of MD5: Yes.</tt><tt><br>
</tt><tt><br>
</tt><tt>Does FIPS mode prevent insecure uses of SHA-1 (a FIPS <br>
algorithm): No.</tt><tt><br>
</tt><tt><br>
</tt><tt>Does FIPS mode prevent the SSL/TLS handshake from using <br>
96 bit truncated HMAC values: Probably not.</tt><tt><br>
</tt><tt><br>
</tt><tt>Does FIPS mode prevent use of the insecurely designed <br>
'tls-unique' feature: Probably not.</tt><tt><br>
</tt><br>
<br>
<pre class="moz-signature" cols="72">Enjoy
Jakob
--
Jakob Bohm, CIO, Partner, WiseMo A/S. <a class="moz-txt-link-freetext" href="https://www.wisemo.com">https://www.wisemo.com</a>
Transformervej 29, 2860 Søborg, Denmark. Direct +45 31 13 16 10
This public discussion message is non-binding and may contain errors.
WiseMo - Remote Service Management for PCs, Phones and Embedded </pre>
</body>
</html>