Archived TD0191: NIT Technical Decision for Using secp521r1 for TLS communication
CPP_ND_V1.0, CPP_FW_V1.0, FCS_TLSS_EXT.1.3. FCS_TLSS_EXT.2.3
The Network Interpretations Team (NIT) has issued a technical decision regarding using secp521r1 for TLS communication.
To align with NIT interpretation # 201611rev2, FCS_TLSS_EXT.1.3 and FCS_TLSS_EXT.2.3 is modified as follows:
"The TSF shall generate key establishment parameters using RSA with key size 2048 bits and [selection: 3072 bits, 4096 bits, no other size] and [selection: over NIST curves [selection: secp256r1, secp384r1, secp521r1] and no other curves; Diffie-Hellman parameters of size 2048 bits and [selection: 3072 bits, no other size]; no other]."
For further information, please see the NIT interpretation at: https://www.niap-ccevs.org/Documents_and_Guidance/ccevs/NITDecisionRfI201611rev2.pdf
See issue description.