BIND-9X-002050 - A BIND 9.x server must implement NIST FIPS-validated cryptography for provisioning digital signatures and generating cryptographic hashes.

Information

Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data. The application must implement cryptographic modules adhering to the higher standards approved by the federal government since this provides assurance they have been tested and validated.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Create new DNSSEC and TSIG keys using a FIPS-approved cryptographic algorithm that meets or exceeds the strength of SHA-256.

Item Details

Audit Name: DISA BIND 9.x STIG v3r2

Category: SYSTEM AND COMMUNICATIONS PROTECTION

Plugin: Unix

Control ID: 2f369c1a7387faaf75a89f60e767e8102097f0b9e8b7ad01a21da32b9ea0495a

Detections

Analytics

BIND-9X-002050 - A BIND 9.x server must implement NIST FIPS-validated cryptography for provisioning digital signatures and generating cryptographic hashes.

Information

Solution

See Also

Item Details