Good news for developers and vendors of software for the U.S. and Canadian government market where FIPS 140-2 validated cryptography is required.

The "OpenSSL FIPS Object Module", a software component compatible with the OpenSSL API, has been FIPS 140-2 validated (see certificate #733 and Security Policy document at http://csrc.nist.gov/cryptval/140-1/1401val2007.htm). The source distribution that generates this validated module is at http://www.openssl.org/source/openssl-fips-1.1.1.tar.gz.

This validation means that the referenced source distribution can be used to create a binary module on a wide range of platforms, in a form compatible with OpenSSL 0.9.7, for enabling FIPS 140-2 validated cryptography in applications.

Please see the Security Policy document for details on how to create a validated module for your platform and application. Other supporting information will be made available at http://oss-institute.org/FIPS_733/.

-Steve M.

--
Steve Marquess
Open Source Software Institute
[EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Announcement Mailing List                 openssl-announce@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to