Re: [openssl-users] HMAC-MD5 OpenSSL 1.0.1e and FIPS 2.0.7

2015-01-22 Thread John Laundree
Sent: Wednesday, January 21, 2015 09:28 > On Wed, Jan 21, 2015, John Laundree wrote: > > > Ok, so I will naively ask the question "How does one do TLS 1.0/1.1 > > in FIPS > mode? Or is this no longer allowed, i.e. TLS 1.2 only?" > > The use of MD5 for TLS 1

Re: [openssl-users] HMAC-MD5 OpenSSL 1.0.1e and FIPS 2.0.7

2015-01-21 Thread John Laundree
Ok, so I will naively ask the question "How does one do TLS 1.0/1.1 in FIPS mode? Or is this no longer allowed, i.e. TLS 1.2 only?" -Original Message- From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of Salz, Rich Sent: Tuesday, January 20, 2015 4:10 PM To: opens

[openssl-users] HMAC-MD5 OpenSSL 1.0.1e and FIPS 2.0.7

2015-01-20 Thread John Laundree
I want to use code like the following while in FIPS mode const EVP_MD *md md = EVP_md5(); so I can call HMAC() unsigned char *HMAC(const EVP_MD *evp_md, const void *key, int key_len, const unsigned char *d, size_t n, unsigned char *md,

[openssl-users] Looking for ASKDFVS (NIST 800-135) support

2015-01-13 Thread John Laundree
I am looking for test vectors and a test suite to support FIPS KDF testing using openSSL FIPS version 2.0.7 in conjunction with OpenSSL 1.0.1e. Specifically, I am looking to do TLS KDF testing. I am new to openSSL/FIPS community and was expecting to find KDF test vectors similar to what is prov