[openssl-users] FIPS 140-2 X9.31 RNG transition submitted

[Steve Marquess]

If you're not aware of or anxious about the "X9.31 RNG transition",
rejoice. You live in a saner world that those of us who do have to worry
about it.

The test lab has informed me that the formal "change letter" submission
to address the "X9.31 RNG transition" for the OpenSSL FIPS Object Module
v2.0, validation(s) #1747/#2398/#2474, was submitted to the CMVP as of
last Wednesday, 2015-12-23.

The test lab fees for this submission were paid for by DataGravity,
Inc., thereby avoiding further delays that would have impacted the many
vendors using the OpenSSL FIPS module.

I'm already getting queries about the status of this submission. Now
that it is in the hands of the CMVP I have no visibility whatsoever into
its fate (or fates plural, as the CMVP will undoubtedly treat it as
three separate submissions even though all three validations are for the
same cryptographic module). I check the NIST CMVP web site[*] every day
to see what they have or haven't done in the last 24 hours, and will
announce any results here if and when there is anything to announce.

-Steve M.

[*] http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140val-all.htm

-- 
Steve Marquess
OpenSSL Software Foundation
1829 Mount Ephraim Road
Adamstown, MD  21710
USA
+1 877 673 6775 s/b
+1 301 874 2571 direct
marquess at openssl.com
gpg/pgp key: http://openssl.com/docs/0x6D1892F5.asc