From 2927c1f72be96e9970f811618712c5d4c46d051d Mon Sep 17 00:00:00 2001 From: Joachim Vandersmissen Date: Wed, 11 Mar 2026 18:13:21 -0700 Subject: [PATCH 1/3] Add SP800-56C family Fixes #876 Signed-off-by: Joachim Vandersmissen --- schema/cryptography-defs.json | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/schema/cryptography-defs.json b/schema/cryptography-defs.json index 2d1a7f19..a302063c 100644 --- a/schema/cryptography-defs.json +++ b/schema/cryptography-defs.json @@ -1098,6 +1098,21 @@ } ] }, + { + "family": "SP800-56C", + "standard": [ + { + "name": "SP800-56C", + "url": "https://doi.org/10.6028/NIST.SP.800-56Cr2" + } + ], + "variant": [ + { + "pattern": "SP800_56C_(OneStep|TwoStep)[-{auxFunction}][-{dkmLength}]", + "primitive": "key-derive" + } + ] + }, { "family": "BLAKE2", "standard": [ From 6f6b79b82a407b3bb834526344c6f685247ca4b5 Mon Sep 17 00:00:00 2001 From: Joachim Vandersmissen Date: Wed, 11 Mar 2026 20:24:00 -0500 Subject: [PATCH 2/3] Add two variants instead of one Signed-off-by: Joachim Vandersmissen --- schema/cryptography-defs.json | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/schema/cryptography-defs.json b/schema/cryptography-defs.json index a302063c..e6cdca6a 100644 --- a/schema/cryptography-defs.json +++ b/schema/cryptography-defs.json @@ -1108,7 +1108,11 @@ ], "variant": [ { - "pattern": "SP800_56C_(OneStep|TwoStep)[-{auxFunction}][-{dkmLength}]", + "pattern": "SP800_56C_OneStep[-{auxFunction}][-{dkmLength}]", + "primitive": "key-derive" + } + { + "pattern": "SP800_56C_TwoStep_(CounterKDF|FeedbackKDF|DoublePipelineKDF)[-{auxFunction}][-{dkmLength}]", "primitive": "key-derive" } ] From 8c9e8260cd027213a5db0bba0cf3a83544602347 Mon Sep 17 00:00:00 2001 From: Joachim Vandersmissen Date: Thu, 12 Mar 2026 10:31:49 -0500 Subject: [PATCH 3/3] Fix primitive Signed-off-by: Joachim Vandersmissen --- schema/cryptography-defs.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/schema/cryptography-defs.json b/schema/cryptography-defs.json index e6cdca6a..4a6a8ca3 100644 --- a/schema/cryptography-defs.json +++ b/schema/cryptography-defs.json @@ -1094,7 +1094,7 @@ "variant": [ { "pattern": "SP800_108_(CounterKDF|FeedbackKDF|DoublePipelineKDF|KMAC)[-{prfFunction}][-{dkmLength}]", - "primitive": "key-derive" + "primitive": "kdf" } ] }, @@ -1109,11 +1109,11 @@ "variant": [ { "pattern": "SP800_56C_OneStep[-{auxFunction}][-{dkmLength}]", - "primitive": "key-derive" + "primitive": "kdf" } { "pattern": "SP800_56C_TwoStep_(CounterKDF|FeedbackKDF|DoublePipelineKDF)[-{auxFunction}][-{dkmLength}]", - "primitive": "key-derive" + "primitive": "kdf" } ] },