On Monday, January 27, 2014 4:35:34 PM UTC-7, Brian Smith wrote:
> On Mon, Jan 27, 2014 at 10:49 AM,  <ripber...@aol.com> wrote:
> 
> > On Monday, January 27, 2014 10:52:44 AM UTC-7, Brian Smith wrote:
> 
> >> On Mon, Jan 27, 2014 at 9:26 AM,  <ripber...@aol.com> wrote:

Thanks much Brian and Alan for the links - and the 800-52 reference which I 
haven't read yet. 

FIPS 140-2 certification is not fun. It probably takes a consultant and about a 
year to get a binary approved and if you change it, it has to be re-certified. 
Most folks seem to be content that your crypto-library is at least derived 
(i.e. patched) from a version that was certified. Good luck on your efforts 
there.

I'll try to get back to this soon. 

Cheers,
Rick

-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to