From: "Jeffrey Walton" <noloa...@gmail.com>
That's actually covered in the FIPS User Guide.
Oh, I didn't imagine that the way of disabling AES-NI was described in FIPS document.
The runtime environment variable OPENSSL_ia32cap=~0x200000200000000 disables use of AES-NI, PCLMULQDQ, and SSSE3 optimizations for x86-64.
That's exactly what I wished for. I'll try it. Regards MauMau ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org