Hi all.

Why does the AES key wrap feature does not work in FIPS mode of the latest 
FIPS-approved OpenSSL anymore?

Thank you
De



From:   "Dr. Stephen Henson" <st...@openssl.org>
To:     openssl-users@openssl.org
Date:   02/28/2014 04:26 AM
Subject:        Re: FIPS Openssl for Mac OSX 32 bit
Sent by:        owner-openssl-us...@openssl.org



On Thu, Feb 27, 2014, Raghav Varadan wrote:

> Hi All,
> 
> I'm trying to build an application that used fips capable openssl which 
I
> built for Mac osx 32 bit. Now I would like to embed the checksum into 
the
> application binary. I checked the fips user guide and I don't see any
> specific for OSX. I know for windows there are two ways to embed the
> checksum 1) using fipslink.pl 2) msincore and again for linux we have 1)
> fipsld 2) incore utilites. Similarly what should I be using for MacOSX?
> 
> Questions:
> 1) Does fipsld also work for OSX?
> 2) For ios the document mentions about incore_macho utility, can this be
> used for osx 32 applications to embed checksum?
> 

If you're using shared libraries then the checksum is in those and you 
don't
insert one in the application binary. If you use static libraries you use
fipsld, it's not just Linux it works with it should be OK on any U*ix like
natively compiled platform.

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

CONFIDENTIALITY NOTICE - SNC EMAIL: This email and any attachments are 
confidential, may contain proprietary and protected information, and are 
intended for the use of the intended recipients only. Any review, reliance, 
distribution, disclosure, or forwarding of this email and/or attachments 
outside of SNC without express written approval of the sender, except to the 
extent required to further properly approved SNC business purposes, is strictly 
prohibited. If you are not the intended recipient of this email, please notify 
the sender immediately, and delete all copies without reading, printing, or 
saving in any manner.

Reply via email to