Recommend updating FCS_SNI_EXT.1.3

[jmcdaniels]

Current:
The TSF shall [selection:
use no IVs
create IVs in the following manner [selection:
CBC: IVs shall be non-repeating and unpredictable
CCM: Nonce shall be non-repeating and unpredictable
XTS: No IV. Tweak values shall be non-negative integers, assigned consecutively, and starting at an arbitrary non-negative integer;
GCM: IV shall be non-repeating. The number of invocations of GCM shall not exceed 2^32 for a given secret key
]
].

New:
https://commoncriteria.github.io/application/master/application-release.html#FCS_SNI_EXT.1
The application shall [selection:
use no IVs
create IVs in the following manner [selection:
CBC: IVs shall be non-repeating and unpredictable;
CCM: Nonce shall be non-repeating;
CTR: "Initial Counter" shall be non-repeating. No counter value shall be repeated across multiple messages with the same secret key.
XTS: No IV. Tweak values shall be non-negative integers, assigned consecutively, and starting at an arbitrary non-negative integer;
GCM: IV shall be non-repeating. The number of invocations of GCM shall not exceed 2^32 for a given secret key. The IV constructed using one of two allowed construction methods given in Section 8.2 of NIST SP 800-38D.
]

[szaydel]

Maybe a small clarification:

CTR: "Initial Counter" shall be non-repeating. No counter value shall be repeated across multiple messages encrypted with the same secret key.

[jmcdaniels]

Go with crypto catalog for FCS_OTV_EXT.1.1 and key wrap, verify NSA is ok with changes.

[jmcdaniels]

Updated FDE AA to OTV. Review and see if we need to modify. Left out some options we don't use. I don't love some of the default language used in the notes column.

[jmcdaniels]

Revert to SNI for now. See if OTV gets updated in the catalog and consider update later.

Change to on hold after revert.

[jmcdaniels]

Reverted back to SNI.