Hi, I can see there is an important note that FIPS 1.2 is no longer valid in its current form past 2010 (http://www.openssl.org/docs/fips/fipsnotes.html) There is also a reference to SP 800-131.
>From reading it, it looks like it should be ok to use it until 2015. For example, the random number generator being used (X9.31) is valid till end of 2015. Can anyone tell me why it is stated that FIPS 1.2 is not valid to use for private validation ? Thanks, Tal