Doubt on OpenSSL FIPS Compliance

[prakash babu]

Hello All,   i. OpenSSL 0.9.7e supports FIPS-140.   ii. OpenSSL contains the FIPS 140 specific cryptographic API and algorithm implementations only for low level algorithms (RSA, AES, 3DES, DSA, SHA-1) in the  fips subdirectory.   iii. When we build OpenSSL with FIPS support the FIPS implementations of the above algorithms and the normal implementations for the other algorithms are added to the crypto library.   My question is   Can we call this crypto library FIPS compliant (or) should we disable the unsupported algorithms using no-<CIPHER> to call it FIPS compliant  ?   Thanks, Prakash Do you Yahoo!? Yahoo! Sports - Sign up for Fantasy Baseball.