How to Make your Diffie-Hellman Key Exchange FIPS Compliant

Get the FIPS cheat sheet here: cryptosense.com/datasheets/fi...
Request a trial of Cryptosense Analyzer to automate checking your applications for FIPS compliance: cryptosense.com/analyzer/demo
Diffie-Hellman key exchange is a widely used method to do pair-wise key exchange. However, you may have had the experience that your application crashes when you put it into "strict" FIPS mode and try to do a key exchange. So why does this happen? In this video Graham explains right way to do a Diffie Hellman key exchange in a FIPS compliant way. Clue: it involves domain parameters!
More videos on FIPS compliance for applications:
- 3 FIPS Cryptography Compliance Properties That You Can't Check Statically: • 3 FIPS Cryptography Co...
- WEBINAR RECORDING: What is FIPS Cryptography? How to get FIPS 140 Compliance? • WEBINAR RECORDING: Wha...

[@jonathanduran3814]

Very great explanation. Your way of explaining is great for an intermediate experienced individual to grasp the important concepts. Please continue more of this !!! Your nice and slow and detailed explanation is amazing, I am a big fan.

[@Cryptosense]

Thanks!

[@hatimbekhushi126]

Can you explain with some examples. I want to create a Deffie-Hellman parameters for NGINX. Thank you!

[@ludovicflament5259]

Good explanations. Just a fix regarding the NIST publication. It is not SP856 but SP 800-56

[@Cryptosense]

Thanks Ludovic, fixed it in the subtitles.