sha256 in FIPS mode.

2009-10-27 Thread Miller, Rob (Omaha)
Hi, My question is regarding the library in FIPS mode and the FIPS_selftest function. The current FIPS_selftest routine in 0.9.8k calls sha1, hmac, aes, des, rsa, and dsa selftests. It doesn't call any sha256, 512 KAT selftests and I didn't find these routines in the source. In

Re: sha256 in FIPS mode.

2009-10-27 Thread Dr. Stephen Henson
On Tue, Oct 27, 2009, Miller, Rob (Omaha) wrote: Hi, My question is regarding the library in FIPS mode and the FIPS_selftest function. The current FIPS_selftest routine in 0.9.8k calls sha1, hmac, aes, des, rsa, and dsa selftests. It doesn't call any sha256, 512 KAT selftests and I didn't

Re: sha256 in FIPS mode.

2009-10-27 Thread Steve Marquess
Miller, Rob (Omaha) wrote: Hi, My question is regarding the library in FIPS mode and the FIPS_selftest function. The current FIPS_selftest routine in 0.9.8k calls sha1, hmac, aes, des, rsa, and dsa selftests. It doesn’t call any sha256, 512 KAT selftests and I didn’t find these routines

RE: sha256 in FIPS mode.

2009-10-27 Thread Miller, Rob (Omaha)
-Original Message- From: owner-openssl-...@openssl.org [mailto:owner-openssl-...@openssl.org] On Behalf Of Dr. Stephen Henson Sent: Tuesday, October 27, 2009 12:18 PM To: openssl-dev@openssl.org Subject: Re: sha256 in FIPS mode. On Tue, Oct 27, 2009, Miller, Rob (Omaha) wrote: Hi, My question

Re: sha256 in FIPS mode.

2009-10-27 Thread Steve Marquess
Miller, Rob (Omaha) wrote: Thanks for your answer. I have an additional questions about the FIPS_selftest API call. The user guide states that FIPS_selftest can be called for initiated self tests. What is the reason that the incore fingerprint is not validated again in the FIPS_selftest api?