THE INFORMATION IN THIS ARTICLE APPLIES TO:
DISCUSSION
Some organizations require that file transfers are restricted to FIPS-compliant algorithms. The library used by our OpenPGP module is not restricted to only FIPS-compliant cryptography. However, you can add a registry setting to EFT to restricts the OpenPGP module to use only FIPS-compliant cryptography that is available in the library.
The registry setting described below, when present and the DWORD value is set to non-zero, will configure the OpenPGP library to use FIPS-compliant cryptography only.
To enable FIPS-compliant mode for the OpenPGP module
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\GlobalSCAPE Inc.\EFT Server 4.0\Config\]
DWORD: OpenPGPFIPSCompliantAlgorithmsOnly
- 0 = not FIPS only
- 1 = FIPS-compliant cryptography only
- Default when not specified = 0 (not FIPS-only cryptography)
The table below lists the algorithms available for each mode.
|
=Symmetric Encryption Algorithms=
3DES (192-bit key)
AES256 (256-bit key)
AES192 (192-bit key)
AES128 (128-bit key)
|
=Symmetric Encryption Algorithms=
3DES (192-bit key)
CAST5 (128-bit key)
AES256 (256-bit key)
AES192 (192-bit key)
AES128 (128-bit key)
BLOWFISH (128-bit key, 16 rounds)
TWOFISH (256-bit key)
IDEA (128-bit key)
|
|
=Hash Algorithms=
SHA1
SHA256
SHA384
SHA512
SHA224
|
=Hash Algorithms=
SHA1
MD5
SHA256
SHA384
SHA512
SHA224
RIPEMD160
|
|
=Asymmetric Algorithms=
RSA (512-bit ~ 4096-bit key)
DSA (512-bit ~ 4096-bit key, Sign-Only)
|
=Asymmetric Algorithms=
RSA (512-bit ~ 4096-bit key)
DSA (512-bit ~ 4096-bit key, Sign-Only)
Elgamal (512-bit ~ 4096-bit key, Encrypt-Only)
|
|
=Compression Algorithms=
zip (RFC1951)
zlib (RFC1950)
bzip2 (BZ2)
none
|
=Compression Algorithms=
zip (RFC1951)
zlib (RFC1950)
bzip2 (BZ2)
none
|