Secure Simple Pairing curve

[jvdsn]

The PP-Module mandates Secure Simple Pairing support (FIA_BLT_EXT.4). According to the Bluetooth standard, Secure Simple Pairing is performed using curve P-192. Did the PP-Module authors consider how this interacts with the key establishment requirements in the Base-PP? For example, PP_MDF_V3.3 requires that cryptographic key establishment using ECC is compliant with NIST Special Publication 800-56A Revision 3. That NIST document does not specify P-192 as an approved curve for key establishment. As I understand it, it is also not supported through ACVP testing.

Not to open a big can of worms, but it would be nice if the PP-Module could at least acknowledge that P-192 is used by SSP.