Yes, well I was led to believe that there was no advantage in having the FIPS module if our product was being independently validated anyway. I'm finding out now that's not true, so I'm putting it back in. Thanks Steve. TJ
On 25 October 2012 02:33, Steve Marquess <marqu...@opensslfoundation.com> wrote: > On 10/23/2012 06:05 PM, TJ wrote: >> Can somebody please confirm that the SP 800-90 DRNGs are only included >> with the FIPS module? I removed the FIPS module from our product since >> we are doing our own validation, ... > > Heads up: you're going to find out that "removing the FIPS module" and > doing "our own validation" of OpenSSL is a losing proposition. There's a > reason the FIPS module was a separate software component long before the > introduction of DRBGs. > > -Steve M. > > -- > Steve Marquess > OpenSSL Software Foundation, Inc. > 1829 Mount Ephraim Road > Adamstown, MD 21710 > USA > +1 877 673 6775 s/b > +1 301 874 2571 direct > marqu...@opensslfoundation.com > marqu...@openssl.com ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
