Re: End of the line for OpenSSL Fips?

2013-07-19 Thread Steve Marquess
On 07/18/2013 10:17 PM, Thomas J. Hruska wrote: > ... > I'm not seeing anywhere in the Q&A where it might suggest how much > funding would be required to meet the financial goals of upgrading > OpenSSL FIPS. Based on the "as low as" private label price tag of > $35,000 located elsewhere on the sit

Re: End of the line for OpenSSL Fips?

2013-07-18 Thread Thomas J. Hruska
On 7/18/2013 12:14 PM, Steve Marquess wrote: On 07/18/2013 12:53 PM, Nou Dadoun wrote: Just as a short comment, our fips/non-fips usage could probably satisfy this requirement; we wrap openssl in an external api that routes through a function pointer table. Then at run-time we can fill in the f

Re: End of the line for OpenSSL Fips?

2013-07-18 Thread Steve Marquess
On 07/18/2013 12:53 PM, Nou Dadoun wrote: > Just as a short comment, our fips/non-fips usage could probably > satisfy this requirement; we wrap openssl in an external api that > routes through a function pointer table. Then at run-time we can > fill in the function pointers with the fips functions

RE: End of the line for OpenSSL Fips?

2013-07-18 Thread Nou Dadoun
age- From: Steve Marquess [mailto:marqu...@opensslfoundation.com] Sent: July 17, 2013 4:55 PM To: openssl-users@openssl.org Cc: Nou Dadoun Subject: Re: End of the line for OpenSSL Fips? On 07/16/2013 08:10 PM, Nou Dadoun wrote: > Since I hadn't looked for a while, I thought that I'd see

Re: End of the line for OpenSSL Fips?

2013-07-17 Thread Steve Marquess
On 07/16/2013 08:10 PM, Nou Dadoun wrote: > Since I hadn't looked for a while, I thought that I'd see where the > current Openssl FIPS work stood and found this: > http://www.opensslfoundation.com/fips/ig95.html > > Surprised that I hadn't heard about this previously but if I'm > reading it corre

End of the line for OpenSSL Fips?

2013-07-16 Thread Nou Dadoun
Since I hadn't looked for a while, I thought that I'd see where the current Openssl FIPS work stood and found this: http://www.opensslfoundation.com/fips/ig95.html Surprised that I hadn't heard about this previously but if I'm reading it correctly, it seems to effectively kill any future Openss