IBM is using OpenSSL as the base for providing a FIPS 140-2 certified
software crypto. solution for a number of it's products.
The project started some time ago and consists of OpenSSL "libcrypt" with
the changes below, and an IBM wrapper which provides the extra
functionality needed for FIPS compliance.
If parts of this patch are wanted feel free to incorporate them, we are
donating this to the OpenSSL project under it's licensing terms, or get
back to me to get me to clean them up for inclusion if parts are wanted,
but just too ugly currently.
Of possible interest, WIN64/Itanium support, HPUX/Itanium (32 & 64 bit),
OS/2 without EMX, and assembler speedups for AIX , PPC Linux and zSeries
Linux in both 32 & 64 bit modes.
I'll follow this email with others containing just the assembler
modifications for various platforms.
This modification has been tested across a range of platforms - on it's own
the code isn't FIPS compliant, but it is being used as the crypto. core for
code that is being FIPS certified.
We have complied with IBM's legal requirements and US and Australian export
requirements.
Diff's between OpenSSL-0.9.7c and IBM's code.
(See attached file: ibm.patch)
IBM specific configuration. i.e. the options we pass through to OpenSSL
Configure.
(See attached file: config)
Peter Waltenberg
Team Lead
IBM Crypto for C Team
IBM/Tivoli Gold Coast Office
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
