Re: openssl-fips-2.0.16 : RSA key generation !!

2020-01-01 Thread Dr Paul Dale
There are transitions ahead to remove FIPS 186-2 as a standard. At the moment all is good, later in this year some things will disappear and be invalid. The OpenSSL project is aware of the situation but has not yet made a decision about the path to follow. One thing we can say is that the old F

openssl-fips-2.0.16 : RSA key generation !!

2020-01-01 Thread Hareesh D
Hi, In the openssl-fips-2.0.16 version, I see that some validations are missing (generating probable primes P, Q as part of RSA key generation) which are mentioned in NIST.FIPS.186-4.pdf. B.3.3 -> Process : Points 4.4, 4.7, 5.4, 5.5 and 5.8. Can someone please confirm this behaviour. Thanks !!

Doubts between libfips.a and fips.so in openssl3.0

2020-01-01 Thread Manish Patidar
Hi What is the difference in libfips.a and fips.so.? Selftest.c and fipsprov.c is extra in fips.so library compilation. Does it mean that it just add provider entry function and self test, which is required for fips certification.? Once openssl3.0 is fips certified, can we use libfips.a directl