Re: [openssl-users] FIPS mode: Need to use FIPS versions of (EVP) methods ?

2016-08-02 Thread Dr. Stephen Henson 
On Tue, Aug 02, 2016, jonetsu wrote:

> FIPS: Need to use FIPS versions of (EVP) methods ?
> 
> In FIPS mode, is there a need to use the FIPS_* methods instead of the
> regular ones once FIPS_mode_set(1) was successfully executed ?  For
> instance, is there a need to use FIPS_evp_sha1() instead of EVP_sha1()
> ?  Wouldn't the FIPS version of EVP_sha1() be used automatically when
> in FIPS mode ?
> 

The FIPS implementation of sha1 is automatically used in FIPS mode yes. You
shouldn't use FIPS_evp_sha1() etc.

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

[openssl-users] FIPS mode: Need to use FIPS versions of (EVP) methods ?

2016-08-02 Thread jonetsu 
FIPS: Need to use FIPS versions of (EVP) methods ?

In FIPS mode, is there a need to use the FIPS_* methods instead of the
regular ones once FIPS_mode_set(1) was successfully executed ?  For
instance, is there a need to use FIPS_evp_sha1() instead of EVP_sha1()
?  Wouldn't the FIPS version of EVP_sha1() be used automatically when
in FIPS mode ?

Thanks.




--
View this message in context: 
http://openssl.6102.n7.nabble.com/FIPS-mode-Need-to-use-FIPS-versions-of-EVP-methods-tp67696.html
Sent from the OpenSSL - User mailing list archive at Nabble.com.
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users