-
Type: Task
-
Resolution: Unresolved
-
Priority: Unknown
-
None
-
Affects Version/s: None
-
Component/s: Platform Support
-
None
-
C Drivers
Making the C driver SCRAM SHA-256 FIPS compliant when compiled with Native Crypto support on Windows requires use of BCryptDeriveKeyPBKDF2 in the bcrypt.h library.
BCryptDeriveKeyPBKDF2 was seemingly added in MinGW-w64 6.0.0, we test against some Evergreen hosts using MinGW-w64 4.9.1.
CDRIVER-5634 currently deals with this by checking if theĀ BCryptDeriveKeyPBKDF2 symbol is available with CMake. If it is not available, the driver falls back to the previous key derivation implementation and computes the SCRAM step Hi() as defined in RFC5802 which is not FIPS compliant.
- is caused by
-
CDRIVER-5634 SCRAM-SHA-256 FIPS Compliance
- Closed