The FIPS 140-2 validation effort for the OpenSSL FIPS Object Module 2.0
has reached an important milestone. We have declared "code freeze", a
little later than originally planned, and have submitted formal software
distributions to the accredited testing laboratory.
Those distributions can be found at
http://opensslfoundation.com/testing/validation-2.0/source/
There are two separate versions because some sponsors have requested
testing with a module that contains only prime curve EC. The "1.9"
notation accommodates a test lab versioning scheme. Please note
that these source code distributions *cannot* be used to generate
validated modules for two reasons. First, nothing has been validated
yet, and secondly the distributions still deliberately identify the contents
as suitable for testing purposes only. After the test lab has finished its
review we will with their oversight and approval generate new final
distributions of production code.
Also note that we have already been requested to make some changes to
the test suite utilities used by the test lab for their test and review
activities. Those interested parties wishing to examine the software as
it is being tested are encouraged to reference the
OpenSSL-fips-2_0-stable branch in the OpenSSL CVS repository.
-Steve M.
--
Steve Marquess
OpenSSL Software Foundation, Inc.
1829 Mount Ephraim Road
Adamstown, MD 21710
USA
+1 877 673 6775 s/b
+1 301 874 2571 direct
marqu...@opensslfoundation.com
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
