[openssl-users] FIPS mode and AES_set_encrypt_key/AES_set_decrypt_key

[David Weidenkopf]

Can anyone shed light on why these APIs are disabled in FIPS mode? They
involve operations that must be implemented within the boundary of the FIPS
crypto module? It seems like disabling them is intended to prevent mistakes
from developers trying to write their own AES mode implementations?


Thanks in advance for any insight...
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20150512/e68e34b0/attachment.html>