> Just to add my thoughts to the cooking pot, FIPS-140 probably isn't worth a
> string of beans.
You are technically savvy enough to decide that for yourself. Many
folks are not -- who, really, is equipped to run RNG tests and
understand the importance for keygen?
The FIPS-140 specs are remarkably good. Many customers rightfully want
a FIPS certification as a trusted third party evaluation of a vendor's
product.
/r$
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]