I have downloaded openssl-1.0.1c and openssl-fips-2.0-test-20120522. Looking into 1.0.1c source, I notice there is CMAC support (cmac/cmac.c) available under crypto/. There is similar HMAC support there. The API available in cmac.h and hmac.h is almost identical, but HMAC has a convenient one-call function that is a wrapper for some init, update, and cleanup functions. I can't find a similar CMAC one-stop function, and since there is no documentation, I'm unsure of the correct incantation of CMAC function calls to encrypt with this algorithm.
I think OpenSSL 1.0.1 is the only version so far with the CMAC and CCM support I'm looking for. It is my understanding that only FIPS 2.0, which is still being reviewed by CMVP and is not released yet, is the only FIPS module that is compatible with 1.0.1. If this is correct, then is there a plan to add additional API conveniences for CMAC, or some helpful documentation? Thanks very much. ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [email protected]
