[openssl-users] CAVP protocol testing - what does it really consist of ?

2015-10-21 Thread jonetsu
Hello, Sorry if this is a bit beside OpenSSL per se, the idea behind this post is to perhaps have some information form the OpenSSL experience with FIPS validation.  There was so much effort put into FIPS compliance that it would not be far-fetched to consider that there is also knowledge

Re: [openssl-users] CAVP protocol testing - what does it really consist of ?

2015-10-21 Thread Steve Marquess
On 10/21/2015 12:02 PM, jonetsu wrote: > > Hello, > > > Sorry if this is a bit beside OpenSSL per se, the idea behind this > post is to perhaps have some information form the OpenSSL experience > with FIPS validation. There was so much effort put into FIPS > compliance that it would not be

Re: [openssl-users] CAVP protocol testing - what does it really consist of ?

2015-10-21 Thread jonetsu
> From: "Steve Marquess" > Date: 10/21/15 14:18 > See Appendix B of the OpenSSL FIPS User Guide: >  https://openssl.org/docs/fips/UserGuide-2.0.pdf Thanks. > The specific algorithm tests have changed quite a bit since then > (constant change is part of the fun), but

Re: [openssl-users] CAVP protocol testing - what does it really consist of ?

2015-10-21 Thread dj
I my experience of getting CAVP certification on my own (non openssl) designs it is like this: 1) Pay few ten thousands of dollars to a certification company. 2) They send you a questionnaire about the algorithms you have in the implementation. 3) You fill that in and return it to them with