[Qemu-devel] [Bug 1809252] [NEW] Password authentication in FIPS-compliant mode

[Tomasz Barański]

Public bug reported:

The documentation states, that:

"The VNC protocol has limited support for password based authentication.
(...) Password authentication is not supported when operating in FIPS
140-2 compliance mode as it requires the use of the DES cipher."

Would it be possible for qemu to use a different cipher and re-enable
password as an option in VNC console? Is there a technical reason for
not using a stronger cipher?

** Affects: qemu
     Importance: Undecided
         Status: New


** Tags: fips vnc

-- 
You received this bug notification because you are a member of qemu-
devel-ml, which is subscribed to QEMU.
https://bugs.launchpad.net/bugs/1809252

Title:
  Password authentication in FIPS-compliant mode

Status in QEMU:
  New

Bug description:
  The documentation states, that:

  "The VNC protocol has limited support for password based
  authentication. (...) Password authentication is not supported when
  operating in FIPS 140-2 compliance mode as it requires the use of the
  DES cipher."

  Would it be possible for qemu to use a different cipher and re-enable
  password as an option in VNC console? Is there a technical reason for
  not using a stronger cipher?

To manage notifications about this bug go to:
https://bugs.launchpad.net/qemu/+bug/1809252/+subscriptions