Sort of on this topic, can providers like ncp and n2cp be made FIPS certified some day.. Does a hardware provider require a keystore on board (like a SCA-6000) to be FIPS?
If so, there are some interesting scenarios one can have with ncp and the recently integrated hardware keygen project.. Tony