[openssl-users] FIPS 140-2 X9.31 RNG transition finally complete

[Steve Marquess]

Some good news for a change, but if you neither know nor care what FIPS
120-2 is you're not missing anything.

The final "X9.31 RNG transition" change letter update for the third
validation (#2398) of the OpenSSL FIPS Object Module v2.0 trilogy
(#1747/#2398/#2747) was approved yesterday. This approval means that
OpenSSL FIPS module is now past any risk of de-listing to "not to be
used" status as has happened to so many other validations recently[*].
All 120+ platforms listed across those three validations for multiple
module revisions are valid.

Approval of this validation took a lot longer than the essentially
identical submissions for the other two validations done at the same
time; presumably because the CMVP decided to roll up multiple pending
change letters for the #2398 validation. This recently approved
submission includes the addition of some new platforms at revision
2.0.12 along with the RNG transition wordsmithing.

Thanks again to DataGravity for making this "RNG transition" compliance
possible by paying the test lab fees.

-Steve M.

[*] The de-listed validations can be found at
http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140val-historical.htm

-- 
Steve Marquess
OpenSSL Validation Services, Inc.
1829 Mount Ephraim Road
Adamstown, MD  21710
USA
+1 877 673 6775 s/b
+1 301 874 2571 direct
marquess at openssl.com
gpg/pgp key: http://openssl.com/docs/0x6D1892F5.asc