<div dir="ltr"><div dir="ltr">Hi Bernhard,<div><br><div>Thanks for the information.</div><div><br></div><div>I am looking for an online documentation where I can find supported GPG4WIN cipher blocks.</div><div><br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div>I can run gpg --version and system tells me about the supported algorithms but I am looking to find out what cipher blocks GPG4Win supports:</div><div><br></div><div>For example: ECB, CFB, CBC, OFB, CTR, CCM, GCM, OCB, XTS, EAX</div><div><br></div><div>Is there any configuration setting we can use to pass the cipher block name?</div><div><br></div><div>Please advise. Appreciate the support.</div><div><br></div><div><b>Thanks,</b></div><div dir="ltr"><b>Gaurav Sharma<br></b></div><div dir="ltr"><div><b>Solutions Architect - DTS</b></div><div><b>Arizona Department of Economic Security</b></div><div><b>Phone: 480-363-4405</b><br></div></div></div></div></div></div></div></div><br><input name="virtru-metadata" type="hidden" value="{"email-policy":{"state":"closed","expirationUnit":"days","disableCopyPaste":false,"disablePrint":false,"disableForwarding":false,"enableNoauth":false,"persistentProtection":false,"expandedWatermarking":false,"expires":false,"isManaged":false},"attachments":{},"compose-id":"28","compose-window":{"secure":false}}"></div></div></div><br><div class="gmail_quote" style=""><div dir="ltr" class="gmail_attr">On Tue, Jul 6, 2021 at 11:29 PM Bernhard Reiter <<a href="mailto:bernhard@intevation.de">bernhard@intevation.de</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hi Gaurav,<br>
<br>
Am Mittwoch 07 Juli 2021 01:50:21 schrieb Gaurav Sharma:<br>
> If this product operates a FIPS 140-2 validated module<br>
<br>
* libgcrypt (the relevant crypte module of Gpg4win) has active FIPS 140-2 <br>
certifications for other platforms than Windows.<br>
<br>
<a href="https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Basic&ModuleName=libgcrypt&CertificateStatus=Active&ValidationYear=0" rel="noreferrer" target="_blank">https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Basic&ModuleName=libgcrypt&CertificateStatus=Active&ValidationYear=0</a><br>
<br>
> If so, can you please provide me with any documentation around it?<br>
<br>
The technical development manual with the details is here<br>
<a href="https://www.gnupg.org/documentation/manuals/gcrypt/Enabling-FIPS-mode.html" rel="noreferrer" target="_blank">https://www.gnupg.org/documentation/manuals/gcrypt/Enabling-FIPS-mode.html</a><br>
<br>
Citing from it:<br>
Because FIPS 140 has certain restrictions on the use of cryptography<br>
which are not always wanted, Libgcrypt needs to be put into FIPS mode<br>
explicitly. <br>
<br>
So it depends what you need:<br>
* general code quality, is there<br>
* fips mode, you'd need to build the product with this mode enabled<br>
* certified binaries, not there yet, if there is a lot of demand,<br>
a vendor like <a href="https://gnupg.com/" rel="noreferrer" target="_blank">https://gnupg.com/</a> maybe able to provide them some point<br>
in the future.<br>
<br>
Best Regards,<br>
Bernhard<br>
<br>
-- <br>
<a href="http://www.intevation.de/~bernhard" rel="noreferrer" target="_blank">www.intevation.de/~bernhard</a> +49 541 33 508 3-3<br>
Intevation GmbH, Osnabrück, DE; Amtsgericht Osnabrück, HRB 18998<br>
Geschäftsführer Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner<br>
</blockquote></div></div>
<br>
<div><font face="Arial, Helvetica, sans-serif" size="1"><br></font></div><font face="Arial, Helvetica, sans-serif" size="1">NOTICE: This e-mail (and any attachments) may contain PRIVILEGED OR CONFIDENTIAL information and is intended only for the use of the specific individual(s) to whom it is addressed. It may contain information that is privileged and confidential under state and federal law. This information may be used or disclosed only in accordance with law, and you may be subject to penalties under law for improper use or further disclosure of the information in this e-mail and its attachments. If you have received this e-mail in error, please immediately notify the person named above by reply e-mail, and then delete the original e-mail. Thank you.</font>