NIST SP 800-167 Guide to Application Whitelisting 3.2a: Use validated cryptography for hashing, signature validation and management traffic, and plan for algorithm change

What does 3.2a require?

The design uses approved algorithms in validated cryptographic modules for the three cryptographic functions of the solution: generating and verifying hashes of files and components, validating digital signatures, and keeping the traffic between hosts and central management confidential and intact (for federal agencies, FIPS-approved or NIST-recommended algorithms in validated modules). The organisation also considers how readily the solution can move to stronger algorithms and key sizes later.