[openssl-users] OpenSSL - FIPS 140 Compliant

[Steve Marquess]

On 08/17/2016 09:10 AM, Vikram Kamaraj - ERS, HCL Tech wrote:
> Hello OpenSSL,
> 
>  
> 
> Which version of OpenSSL is FIPS 140 compliant?

None. A more useful question to ask is "for which versions of OpenSSL
are compatible FIPS modules available?". The answer to that is
1.0.1/1.0.2 with the OpenSSL FIPS Object Module 2.0, and (in a year or
two) OpenSSL 1.1 with a new FIPS module still to be developed and
validated (but in progress).

You may want to take a look at the OpenSSL FIPS module user guide:

  https://www-origin.openssl.org/docs/fips/UserGuide-2.0.pdf

The background discussion there will still be relevant for the new FIPS
module.

-Steve M.

-- 
Steve Marquess
OpenSSL Validation Services, Inc.
1829 Mount Ephraim Road
Adamstown, MD  21710
USA
+1 877 673 6775 s/b
+1 301 874 2571 direct
marquess at openssl.com
gpg/pgp key: http://openssl.com/docs/0x6D1892F5.asc