Hi List, In the FIPS security policy it states that OpenSSL supports the following modes for AES: "128/ 192/256 ECB, CBC, OFB, CFB 1, CFB 8, CFB 128, CTR, XTS; CCM; GCM; CMAC generate and verify" (page 12).
My library is required to support of these modes in FIPS and non-FIPS mode. Most of them are now working in "non-FIPS"-mode except for CCM and CMAC. EVP_get_cipherbynid() complains that it cannot find NID_aes_128_ccm and the compiler complains that it cannot find the NID defines for the CMAC mode. Are these modes available in non-FIPS mode using OpenSSL 1.0.1? Thanks Leon
