Stack Overflow
Stack Overflow

Questions tagged [nist]

29 questions
3
votes
0 answers

How to test a new random sequence in NIST Test Suite?

I have to test a random sequence using the NIST Test Suite. I have downloaded and run the tests on the files given in the data directory. It is working fine but when I tried to run it on a new random sequence, I am getting igmac: UNDERFLOW error.…
Aisha
  • 127
  • 10
2
votes
0 answers

What is the "vulnerable: field in the cpe_match section of the CVEs in the NVD json feeds

I have looked for a long time top find what the "vulnerable" field of the "cpe_match" section of the "configurations" is. Most of the time that field is true, but there are CVEs where it is false. For example, CVE-2003-0947: "configurations" : { …
Larry
  • 21
  • 2
2
votes
1 answer

NIST Test Suit- igamc: UNDERFLOW

I used a 32-bit random number generator 100,000 times, and resulted in a file of 275,714 bytes. Then I typed the following line in my terminal, ./access 1024 (Here comes my first question, what should we exactly type here?) Then fed my file as…
Alan
  • 21
  • 1
2
votes
0 answers

How to make Federated Learning datasets 'tff.simulation.datasets.emnist' from LEAF and NIST?

I would like to do an image classification task by Federated Learning. According to [tensorflow tutotial], 1, they download the original NIST dataset and use LEAF to pre-process them. However, in the tutorial, the details are omitted, they just load…
Cheng-Chung Li
  • 21
  • 1
1
vote
0 answers

Valgrind Memory error detection on just call to Py_Initialize() and nothing else

I am adding my python code into c++ for making an wrapper to c api that can be later used inside cpp as library and everything is working fine but for except one thing that is memory errors. See bellow code. #include "Python.h" #include…
Muhammad Awais
  • 21
  • 3
1
vote
1 answer

How to get CPE from package?

I have a question related to CPE. Does it exist a method that ensure full translation among package installed and its CPE? Example: package for apache2, in Ubuntu or RedHat, is named apache2 or httpd but its CPE is similar to :apache:http_server:…
kavat
  • 11
  • 1
1
vote
2 answers

How to fix s3-bucket-policy-grantee-check non-compliance?

I deployed a NIST CSF conformance pack on my AWS account, via AWS Config, to improve my security posture. One of my resources was non-compliant due to the s3-bucket-policy-grantee-check not passing. Firstly, I do not understand what it means in…
kryogenic1
  • 166
  • 1
  • 2
  • 15
1
vote
0 answers

Is this misprint at 2.5.8 example from [NIST SP800-22 Revision 1a.]?

I am reading the paper, NIST SP800-22 Revision 1a, which is about Randomness Test suite. This is the link where I found, and read. I summarized my question at the end of post. And below description is how my deduction drawn. And also, I haven't…
TyeolRik
  • 466
  • 2
  • 25
1
vote
1 answer

What is missing from the AES Validation Standard Pseudocode for the Monte Carlo Tests?

I'm trying to use the prescribed validation procedure for AES-128 in CBC mode, as defined in the NIST AESAVS standard. One of the more important parts of the test suite is the Monte Carlo test, which provides an algorithm for generating many 10000…
Onofog
  • 443
  • 3
  • 15
1
vote
2 answers

Error retrieving https://nvd.nist.gov/feeds/json/cve/1.0/nvdcve-1.0-modified.meta; received response code 404

We are getting the following error in our project, when will this URL be back? > Task :dependencyCheckAnalyze Verifying dependencies for project cckm-app Checking for updates and analyzing dependencies for vulnerabilities Error retrieving…
Ashwani
  • 1,340
  • 1
  • 16
  • 34
1
vote
2 answers

Sequence of binary input file for NIST

I've developed an RNG program, for now, I want to test whether my numbers are random. Thus, I decided to use NIST Test Suite. I'm still confused about the input file format, they say: "The user may want to construct as many files of arbitrary length…
Ender
  • 835
  • 1
  • 12
  • 23
0
votes
0 answers

Bulk CVE requests to NIST json APIs

I have a list of CVEs. Do you know a way to look for details about all the CVEs in bulk via the NIST json API (or a free alternative) without performing an http request for each single CVE?
user2461515
  • 339
  • 1
  • 3
  • 8
0
votes
0 answers

How to implement FAL3 requirements in Azure AD?

We have a SAML architecture where we (as the service provider/RP), allow the user to authenticate using their Microsoft account. The assertion is digitally signed by Microsoft (FAL1) and we have an encryption option as well (FAL2). According to NIST…
onyx12
  • 3
  • 2
0
votes
2 answers

ECDSA Signature Verification fails using openssl

I am not able to verify the NIST signature for ECDSA algorithm and below I am presenting the source code for reference. I have tried few vectors available from the ACVP server for testing sample vector for verification Msg = …
Umadevi Palathur
  • 1
  • 1
0
votes
0 answers

How do I install WFDS (Wildfire Dynamic Simulator) when openmpi library "is not loaded"?

I've been trying to install WFDS for a few days and no matter what I try I keep getting this error: dyld: Library not loaded: /usr/local/openmpi-2.0.1/lib/libmpi_usempif08.20.dylib Referenced from: /usr/local/bin/wfds Reason: image not found I've…
pythoner360
  • 1
  • 1
1
2