Re: FIPS mode howto

2006-02-16 Thread Kyle Hamilton
Alright. I'm certainly not suggesting that if you link to a FIPS-certified module, your entire product becomes FIPS-compliant -- as far as I understand, your app still has to go through the same testing procedures, it just doesn't have to go through quite the same crypto validation procedures. (I

Re: FIPS mode howto

2006-02-16 Thread Dr. Stephen Henson
On Thu, Feb 16, 2006, Kyle Hamilton wrote: > Alright. Can you comment on if the source-level API is going to stay > the same, at least? (If it's going to stay the same, then giving > details on how to link with a version of OpenSSL that provides that > API -- even if it's not the "FIPS-certified

Re: FIPS mode howto

2006-02-16 Thread Kyle Hamilton
Alright. Can you comment on if the source-level API is going to stay the same, at least? (If it's going to stay the same, then giving details on how to link with a version of OpenSSL that provides that API -- even if it's not the "FIPS-certified" version -- would allow users to get working on app

Re: FIPS mode howto

2006-02-16 Thread Dr. Stephen Henson
On Thu, Feb 16, 2006, Kyle Hamilton wrote: > Hi, I just figured I'd write something up for your perusal, > modification, and possible inclusion into the HOWTO list. I'm > attaching it as a file; if it doesn't come through, please let me > know, and I'll resend it in a message body. > We will be

FIPS mode howto

2006-02-16 Thread Kyle Hamilton
Hi, I just figured I'd write something up for your perusal, modification, and possible inclusion into the HOWTO list. I'm attaching it as a file; if it doesn't come through, please let me know, and I'll resend it in a message body. If there are any glaring inaccuracies I would very much like to k