[strongSwan-dev] NIST 800-131a

[Martin Willi]

Hi Dale,

> The NIST 800-131a mentions that in 2007, a new set of RNGs were
> approved in SP 800-90. Does the default strongSwan crypto routines
> uses these approved RNGs?

I don't know that document in detail, but it seems that it considers
HMAC with an appropriate hash algorithm acceptable. HMAC is supported
with different hash algorithms in strongSwan.

Regards
Martin