Re: openssl 3.0 fips provider and low level APIs

2022-05-03 Thread Tomas Mraz
All the providers can use the low-level APIs internally to implement crypto algorithms. The FIPS provider however includes all the low level implementations as a separately built and statically linked code. That means you cannot use the low-level calls in an application and still be FIPS compliant

openssl 3.0 fips provider and low level APIs

2022-05-03 Thread Joy Latten
Hi, I understand that low-level APIs have been deprecated in version 3. I have been playing some with the fips provider trying to understand the config options to use with it. I noticed that the fips provider source code includes a few low level APIs like SHA256_Init(). Is it correct to conclude th