[openssl-users] Elliptic curves approved or recommended by government

[Matt Caswell]

On 11/11/15 20:53, jonetsu wrote:
> In the NSA page referred above, the p-384 curves are specifically mentioned
> for DH.  These would be the ones covered by the Suite B NSA license
> sub-licensed to OpenSSL, are they ?  Is it possible to build OpenSSL in FIPS
> in such a way that only these curves will be used ?

OpenSSL 1.0.2 has Suite B support. It can be configured via the cipher
list. See SUITEB128, SUITEB128ONLY, SUITEB192 here:

https://www.openssl.org/docs/man1.0.2/apps/ciphers.html

Matt