Re: openssl 0.9.8 FIPS questions

2008-11-08 Thread Kyle Hamilton
First, terminology: The 1.1.* series of FIPS-validated modules will only operate with the 0.9.7 series. The 1.2.0-test module will operate with 0.9.8. You are correct, the 1.2.0 module has not yet been validated, and there's no way that anyone can predict when it will be. It is done when it is

Re: openssl 0.9.8 FIPS questions

2008-11-07 Thread Dr. Stephen Henson
On Fri, Nov 07, 2008, Roger No-Spam wrote: Furthermore, there seems to be FIPS changes required in openssl outside the FIPS module. This is my conclusion after having studied the FIPS_098_TEST_8 branch in openssl's cvs server. When are these changes scheduled to be merged into the main

openssl 0.9.8 FIPS questions

2008-11-07 Thread Roger No-Spam
Hi,We have included openssl in our product, a proprietary OS and development environment. Customers have requested that we include the FIPS validated version of openssl. We have included the openssl 0.9.8 base line and I am now trying to clarify what the implications are of including the 0.9.8