On Tue, May 22, 2012, Simner, John wrote: > Dear all, > > I am working on an embedded product which currently uses OpenSSL 0.9.8w with > FIPS support. > > We have received a request to support ECC and in particular the following > cipher suites for ECC certification TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA and > TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA. >
The 1.2.* module used with OpenSSL 0.9.8* does not include ECC algorithms in the module so it cannot be used for FIPS compliant crypto. The upcoming 2.0 module using OpenSSL 1.0.1* does support ECC. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org