Re: 3.0 FIPS related questions

2020-03-25 Thread Matt Caswell
On 24/03/2020 15:02, Salz, Rich wrote: > >>> The second question is somewhat related. Has there been a decision yet >> whether the FOM 3.0 will go through a 140-2 or a 140-3 validation? > >>We are going through 140-2. > > Has the list of validated platforms been made public

Re: 3.0 FIPS related questions

2020-03-24 Thread Salz, Rich via openssl-users
>> The second question is somewhat related. Has there been a decision yet > whether the FOM 3.0 will go through a 140-2 or a 140-3 validation? >We are going through 140-2. Has the list of validated platforms been made public yet? For people using a different platform, will

Re: 3.0 FIPS related questions

2020-03-24 Thread Pete
Hi Matt, Thanks so much for the quick and thorough response.  I had caught bits and pieces of the algorithm selection process while going through the design doc but apparently didn't catch just how flexible it really is.  As for the 140 level of testing, that's just what we expected. Thanks

Re: 3.0 FIPS related questions

2020-03-24 Thread Matt Caswell
On 24/03/2020 14:06, Pete wrote: > Hello, > > I have two questions regarding support for FIPS in 3.0.  We're currently > working on early planning for our migration to OpenSSL 3.0 and we're > trying to size the effort for our team.  We're also beginning to put together > contingency plans in

3.0 FIPS related questions

2020-03-24 Thread Pete
Hello, I have two questions regarding support for FIPS in 3.0.  We're currently working on early planning for our migration to OpenSSL 3.0 and we're trying to size the effort for our team.  We're also beginning to put together contingency plans in the event that dates on either side change