I have a question about OpenSSL FIPS mode.

I created openssl using the FIPS module, openssl 0.9.7m, and mingw on windows. It works cross platform with openssl FIPS created on Linux; my Solaris 10 version has been shelved for now.

I can encrypt and decrypt out of FIPS mode.
I cannot decrypt a file encrypted in FIPS mode when I am not in FIPS mode;
I cannot decrypt a file not encrypted in FIPS mode when I am in FIPS mode.
likewise, vanilla openssl does not decrypt a file created with openssl FIPS in FIPS mode.

I thought FIPS mode just disabled ciphers. Is this the expected and normal behavior? I have verified this on Linux and on Windows, and the same holds for cross-platform encryption/decryption.

Thank you

--
Leonard F. Elia III, CISSP
Sr. System Administrator
ConITS - NASA Langley Research Center
NCI Information Systems, Inc., Hampton VA


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to