Assurance

[Tom Scavo <>]

I blogged about this topic earlier this week:
https://spaces.internet2.edu/x/AYbYAg

Hope this helps,

Tom

On Sat, May 3, 2014 at 11:50 AM, Eric Goodman 
<>
 wrote:
> Thanks Tom!
>
> --- Eric
>
>> -----Original Message-----
>> From: 
>> 
>>  [
>> ]
>>  On Behalf Of Tom Barton
>> Sent: Saturday, May 03, 2014 6:01 AM
>> To: 
>> 
>> Subject: Re: [Assurance] Assurance and SHA-1/SHA-2
>>
>> Eric,
>>
>> Section 9 of SP800-131A clearly states that SHA-1 remains acceptable
>> for all non-digital signature generation algorithms.
>>
>> Tom
>>
>> On 5/2/2014 6:37 PM, Eric Goodman wrote:
>> > [And to anyone still reading, I'm still interested in whether SSHA
>> > passwords in LDAP userPassword fields would still count as
>> > Silver-compliant.] --- Eric
>