Re: OpenSSL FIPS Module version 1.2

2009-08-17 Thread Pandit Panburana
FIPS Module version 1.2 On Fri, Aug 14, 2009, Pandit Panburana wrote: > Hello, > > I have a few questions about the FIPS module. > >1) The current version of OpenSSL FIPS Module is 1.2. It is based on >0.9.8e and 0.9.8f of standard OpenSSL. The latest stable vers

Re: OpenSSL FIPS Module version 1.2

2009-08-17 Thread Steve Marquess
Kyle Hamilton wrote: ... There were plans for a "rolling validation", where fixes are rolled into the next validation effort, but I haven't heard anything from the Open Source Software Institute about that. My fear is that they have no funding for such an effort. Correct. At one point w

Re: OpenSSL FIPS Module version 1.2

2009-08-15 Thread Dr. Stephen Henson
On Fri, Aug 14, 2009, Pandit Panburana wrote: > Hello, > > I have a few questions about the FIPS module. > >1) The current version of OpenSSL FIPS Module is 1.2. It is based on >0.9.8e and 0.9.8f of standard OpenSSL. The latest stable version is >0.9.8k. How are fixes get into v

Re: OpenSSL FIPS Module version 1.2

2009-08-14 Thread Pandit Panburana
August 14, 2009 4:21:45 PM Subject: Re: OpenSSL FIPS Module version 1.2 FIPS validation is basically a blessing from a High Priest Of The CMVP. If anything changes from what was blessed, the blessing goes away, unless the changes are blessed by the same or another High Priest. Knowing that, the

Re: OpenSSL FIPS Module version 1.2

2009-08-14 Thread Kyle Hamilton
FIPS validation is basically a blessing from a High Priest Of The CMVP. If anything changes from what was blessed, the blessing goes away, unless the changes are blessed by the same or another High Priest. Knowing that, the following answers are obvious. 1) They don't. The FIPS module only impl