Encryption of Private Keys in SQLite/xdb files

[KenK73]

Is xca using the AES-256 OFB mode to encrypt the private data stored inside the xdb file or is it some other mechanism. Just looking to answer the question: Is it FIPS 140-3 compliant?

[chris2511]

It uses AES256-CBC:

xca/lib/pki_evp.cpp

Line 686 in 29f8d7d

i2d_PKCS8PrivateKey_bio(bba, key, EVP_aes_256_cbc(),

[KenK73]

Fantastic! Thanks!