Re: Initialization of RNG in FIPS mode

2014-10-08 Thread Kevin Fowler
Roger, The FIPS_mode_set() call normally calls OpenSSL_init(), which calls RAND_init_fips(), which initializes/instantiates the FIPS DRBG (including seeding with good entropy from call to the default DRBG bytes() method). This all happens if built with OPENSSL_FIPS defined. So check that is defined

Initialization of RNG in FIPS mode

2014-10-08 Thread Roger No-Spam
Hi, I'm experimenting with porting openssl-1.0.1/openssl-fips-2.0 to a proprietary platform. FIPS_mode_set was failing for me, and some investigation showed that it was the rsa post tests that failed, and that it was related to RNG initialization. I found that if I added the following code be