Well, the first news report is out stating that the FIPS 140-2 validation of the OpenSSL FIPS object module has been revoked: http://www.gcn.com/online/vol1_no1/41371-1.html.
We don't know the full story behind this yet, and perhaps never will. As John Weathersby noted in the article, "This is not about technology". This validation has been under seige by a few detractors from the beginning. We thought we had successfully addressed all the known challenges to date, including the most recent one that resulted in the relinking of the FIPS object module (http://oss-institute.org/index.php?option=content&task=view&id=163). John and I are already being asked what happens next. At this point we don't know, but we haven't necessarily given up. As we learn more I'll pass on our findings here. -Steve M. -- Steve Marquess Veridical Systems, Inc. [EMAIL PROTECTED] ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [EMAIL PROTECTED]
