Re: OpenSSL FIPS Certification

2006-01-30 Thread Dr. Stephen Henson
On Sun, Jan 29, 2006, Kyle Hamilton wrote: 0.9.7h is FIPS certified, as long as you build with unmodified sources (and this is checked with an SHA check on the sources in question). Err no IT IS NOT. The version submitted for validation included various changes to sequestered code (the stuff

RE: OpenSSL FIPS Certification

2006-01-30 Thread Jim Adams
: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dr. Stephen Henson Sent: Monday, January 30, 2006 8:08 AM To: openssl-users@openssl.org Subject: Re: OpenSSL FIPS Certification On Sun, Jan 29, 2006, Kyle Hamilton wrote: 0.9.7h is FIPS certified, as long as you build with unmodified sources

Re: OpenSSL FIPS Certification

2006-01-30 Thread Kiyoshi Watanabe
Are you going to support not only 0.9.7 branch, but also 0.9.8 branch? +Kiyoshi Kiyoshi Watanabe - Original Message - From: Dr. Stephen Henson [EMAIL PROTECTED] To: openssl-users@openssl.org Sent: Monday, January 30, 2006 10:07 PM Subject: Re: OpenSSL FIPS Certification On Sun, Jan

Re: OpenSSL FIPS Certification

2006-01-30 Thread Dr. Stephen Henson
On Mon, Jan 30, 2006, Jim Adams wrote: My question is, has the current snapshot changed since the 0124 snapshot with regards to building FIPS versions for Windows and entering FIPS mode? Or am I doing something wrong, or is there an additional step in the build process that is not yet

Re: OpenSSL FIPS Certification

2006-01-29 Thread Kyle Hamilton
0.9.7h is FIPS certified, as long as you build with unmodified sources (and this is checked with an SHA check on the sources in question). Or at least, that's what I believe to be the case, given the documentation on the Security Policy for it. -Kyle H On 1/29/06, prakash babu [EMAIL PROTECTED]