Re: Entropy for FIPS CTR_DRBG

2013-10-03 Thread Roy R
Apologizes for doing this, but does anyone know the answers to these two questions: 1) How many bytes of entropy does fips_get_entropy() get? 32 (i.e. security_strength) or 40? 2) Is there any way to combine multiple sources of entropy (such as /dev/urandom and egd)? Thank you! On Tue, Oct 1,

Entropy for FIPS CTR_DRBG

2013-10-01 Thread Roy R
Hi all, I'm trying to investigate how entropy is gathered for CTR_DRBG when OpenSSL is in FIPS mode. Environment: RHEL 6 and OpenSSL FIPS Object Module 2.0.2 and OpenSSL 1.0.1c. If I understood this correctly it looks like the security_strength is 256 bits (32 bytes) and seed length is 384 bits