Hi all, The attached patches allow for newer NIST approved stronger algorithms for KDF. See NIST Special Publication 800-108. Most of the impact is in symkey. Additional mods were required for some backwards compatibility for existing card stocks that are in use under the current RHCS8.x diversification scheme. <pki-tks_nistSP800-108KDF.patch><symkey_nistSP800-108KDF_invocationLogic_keyVersionDecodeFix_miscFixes.patch><symkey_nistSP800-108KDF_makefile.patch><symkey_nistSP800-108KDF_newSourceFiles.patch><symkey_nistSP800-108KDF_signatureChange.patch><pki-common_nistSP800-108KDF_keyVersionDecodeFix.patch> Thanks Kent _______________________________________________ Pki-devel mailing list Pki-devel(a)redhat.com https://www.redhat.com/mailman/listinfo/pki-devel