On Tue, Nov 05, 2013, Vuille, Martin (Martin) wrote:

> Hi,
> 
> I have some questions about this change:
> 
> http://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=1dded7f7e8e9f737ef9d7e3c3ef165a78fd7fa1d
> 
> I am interested in using this functionality and wondering whether it would be
> feasible and reasonably safe for me to back-port it on top of 1.0.1e?
> 

You can backport it to 1.0.1e but it will never be officially part of the
1.0.1 release as it includes new features. The first version of OpenSSL it
will appear in in 1.0.2.

> What is it about this change that makes it "experimental"?
> 

It hasn't been widely tested and the tecnique of having mutiple implementations
of the same algorithm in EVP hasn't been used in OpenSSL before. In 1.0.1 the
more cautious approach of not having non-FIPS EVP implementations was taken
instead.

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to