On Monday, January 27, 2014 4:35:34 PM UTC-7, Brian Smith wrote: > On Mon, Jan 27, 2014 at 10:49 AM, <ripber...@aol.com> wrote: > > > On Monday, January 27, 2014 10:52:44 AM UTC-7, Brian Smith wrote: > > >> On Mon, Jan 27, 2014 at 9:26 AM, <ripber...@aol.com> wrote:
Thanks much Brian and Alan for the links - and the 800-52 reference which I haven't read yet. FIPS 140-2 certification is not fun. It probably takes a consultant and about a year to get a binary approved and if you change it, it has to be re-certified. Most folks seem to be content that your crypto-library is at least derived (i.e. patched) from a version that was certified. Good luck on your efforts there. I'll try to get back to this soon. Cheers, Rick -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto