Hi Mark,

Thanks for your response. Let me check with the details you provided.


Rakesh Parihar

Sr. Software Engineer

rakesh.pari...@encora.com <mailto:your.n...@encora.com>
Ahmedabad, IN

[cid:e36974b4-09e5-4d04-aa9a-0e25aa504920]
encora.com<http://www.encora.com/>

________________________________
From: Mark Minnoch <m...@keypair.us>
Sent: 10 August 2020 21:28
To: Rakesh Parihar <rakesh.pari...@encora.com>
Subject: Fwd: openssl-users Digest, Vol 69, Issue 7

Hi Rakesh,

I saw your post on the openssl-users list. We have a customer that is testing 
KeyPair's FIPS module Cert. 
#3503<https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/3503>
 (based on the OpenSSL FOM) on Android 64-bit. We made some minor changes to 
the Configure file (attached). You will need to follow the instructions in our 
Security 
Policy<https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp3503.pdf>
 (Appendix A) to download the FIPS module distribution (from Oracle) and 
replace the Configure file with the attached Configure file.

As you probably know, you are not allowed to make changes to the build process 
for the OpenSSL FOM Cert. #2398. We are enhancing the work the Oracle performed 
to update the OpenSSL FOM. Please let me know if you are successful using the 
KeyPair FIPS module in your testing.

Mark J. Minnoch
Co-Founder, CISSP
KeyPair Consulting
+1 (805) 550-3231<tel:(805)%20550-3231> mobile
https://KeyPair.us<https://keypair.us/>
https://www.linkedin.com/in/minnoch

We expertly guide technology companies in achieving their FIPS 140 goals

UPDATED Blog post: RIP FIPS 186-2<https://keypair.us/2019/08/rip-fips-186-2/>


---------- Forwarded message ---------
From: 
<openssl-users-requ...@openssl.org<mailto:openssl-users-requ...@openssl.org>>
Date: Mon, Aug 10, 2020 at 3:56 AM
Subject: openssl-users Digest, Vol 69, Issue 7
To: <openssl-users@openssl.org<mailto:openssl-users@openssl.org>>


Send openssl-users mailing list submissions to
        openssl-users@openssl.org<mailto:openssl-users@openssl.org>

To subscribe or unsubscribe via the World Wide Web, visit
        https://mta.openssl.org/mailman/listinfo/openssl-users
or, via email, send a message with subject or body 'help' to
        
openssl-users-requ...@openssl.org<mailto:openssl-users-requ...@openssl.org>

You can reach the person managing the list at
        openssl-users-ow...@openssl.org<mailto:openssl-users-ow...@openssl.org>

When replying, please edit your Subject line so it is more specific
than "Re: Contents of openssl-users digest..."
Today's Topics:

   1. Help - Building OpenSSL FIPS for 64 bit Android (Rakesh Parihar)



---------- Forwarded message ----------
From: Rakesh Parihar 
<rakesh.pari...@encora.com<mailto:rakesh.pari...@encora.com>>
To: "openssl-users@openssl.org<mailto:openssl-users@openssl.org>" 
<openssl-users@openssl.org<mailto:openssl-users@openssl.org>>
Cc:
Bcc:
Date: Mon, 10 Aug 2020 10:55:52 +0000
Subject: Help - Building OpenSSL FIPS for 64 bit Android
Hi All,

I am seeking help on generating FIPS compliance OpenSSL libs for Android Native 
Application.
I am trying to build openssl-1.0.2t with the FIPS module openssl-fips-2.0.16 to 
support 64-bit android devices, I have tried following the steps on the Openssl 
wiki <https://wiki.openssl.org/index.php/FIPS_Library_and_Android> and didn't 
found any specific verson dependency for 64bit support for android with FIPS.
I also tried using a script 
<https://github.com/ColdDragon/android-build-openssl-fips> found on GitHub that 
combines the building of the FIPS module and Openssl, I seem to be having 
issues with this as well. I have tried with many Openssl and FIPS versions to 
build for 64bit but not luck.
Any pointers regarding the 64bit supported version of Openssl and FIPS module 
for Andorid and any help in building a FIPS compliant Openssl would be 
appreciated.


Thanks & Regards


Rakesh Parihar

Sr. Software Engineer

rakesh.pari...@encora.com <mailto:your.n...@encora.com>
Ahmedabad, IN

[cid:173d90ac503cf1269a21]
encora.com<http://www.encora.com/>

_______________________________________________
openssl-users mailing list
openssl-users@openssl.org<mailto:openssl-users@openssl.org>
https://mta.openssl.org/mailman/listinfo/openssl-users

Reply via email to