Second try...

The FIPS_rand_set_key and FIPS_rand_seed functions in 0.9.8 appear to have been 
removed in newer OpenSSL FIPS Object Module v2.0.

Are there replacements?  Or are they not needed anymore?  If an application is 
in FIPS mode (i.e. the OpenSSL FIPS Object Module is in FIPS mode), can the 
application fork without having to reset the FIPS rand state?

I see an interface called FIPS_x931_set_key, but I want to use an RBG that is 
compliant with SP 800-90 - which I believe the OpenSSL FIPS Object Module v2.0 
supports.

When does one use the RAND_init_fips function?

Thank you.

Reply via email to