On Fri, Mar 22, 2013, voryl wrote: > Hi > > Would you know if there are SP 800-90 DRBG replacement for FIPS_rand_set_key > and FIPS_rand_set_dt? >
No, those are for the X9.31 PRNG. If you want to supply entropy to the DRBG then you need to supply appropriate callbacks. The FIPS capable OpenSSL supplies the necessary callbacks automatically on initialisation so this only applies if you want to use a the FIPS module without the FIPS capable OpenSSL, or you wish to provide your own instance of the DRBG. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [email protected]
