Naomaru Itoi wrote:
Hello,
Please excuse me for the cross post between the ML and the news group.
I am interested in using FIPS recommended functionality in OpenSSL,
e.g., ANSI X9.31 pseudo random number generator. In OpenSSL 0.9.7g, I
can see a directory "fips" at the top of the source tree and FIPS
related functions there. However, in OpenSSL 0.9.8, I see neither
"fips" directory nor X9.31 function in crypto/rand.
Are X9.31, and maybe other FIPS related functionality, scratched from
0.9.8? Must I use 0.9.7g to get such functionality? Or it is located
in somewhere but I am just not finding it?
Thank you,
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager [EMAIL PROTECTED]
I'm also interested in knowing the OpenSSL team's stance on FIPS mode.
I know it is an annoyance to maintain, but at a conference I attended
just this past week, I ran into someone who uses a different
cryptography package because they claimed that OpenSSL in FIPS mode
"doesn't work". They didn't give me details (I didn't ask - sorry), but
if some package is working in FIPS mode and OpenSSL doesn't in some
regard, even though the docs claim it does, I see this as bad
word-of-mouth press for OpenSSL - however, that doesn't mean it can't be
turned to our advantage by making some changes to the core package.
I'm curious: Do we know how many people use FIPS mode crypto packages
(not just OpenSSL)? What is the general demographic for someone who
wants to use FIPS mode OpenSSL? That is, do they tend to run Windows or
*NIX builds?
--
Thomas Hruska
Shining Light Productions
Home of BMP2AVI, Nuclear Vision, ProtoNova, and Win32 OpenSSL.
http://www.slproweb.com/
Ask me about discounts on any Shining Light Productions product!
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager [EMAIL PROTECTED]
