Re: Doubt on OpenSSL FIPS Compliance

2005-02-25 Thread Prashant Kumar
I think I got the answer for my question from the following FAQ:   http://oss-institute.org/fips-faq.html#a10   Regards, Prashant.Prashant Kumar <[EMAIL PROTECTED]> wrote: Hello All,   http://www.linuxsecurity.com/content/view/115240/65/   The above news says that the library in version 0.9.7b of

Re: Doubt on OpenSSL FIPS Compliance

2005-02-25 Thread Prashant Kumar
Hello All,   http://www.linuxsecurity.com/content/view/115240/65/   The above news says that the library in version 0.9.7b of OpenSSL was validated--FIPS serves as validation only for encryption modules, not entire software packages.   Does this mean that OpenSsl has to get FIPS certification for

Re: Doubt on OpenSSL FIPS Compliance

2005-02-25 Thread Dr. Stephen Henson
On Thu, Feb 24, 2005, prakash babu wrote: > Hello All, > > i. OpenSSL 0.9.7e supports FIPS-140. > It doesn't. It hasn't been certified yet. > ii. OpenSSL contains the FIPS 140 specific cryptographic API and algorithm > implementations only for low level algorithms (RSA, AES, 3DES, DSA, SHA

Doubt on OpenSSL FIPS Compliance

2005-02-24 Thread prakash babu
Hello All,   i. OpenSSL 0.9.7e supports FIPS-140.   ii. OpenSSL contains the FIPS 140 specific cryptographic API and algorithm implementations only for low level algorithms (RSA, AES, 3DES, DSA, SHA-1) in the  fips subdirectory.   iii. When we build OpenSSL with FIPS support the FIPS implem