[openssl-users] Digest MD5 forbidden in FIPS mode

Dr. Stephen Henson steve at openssl.org
Tue Jan 19 03:07:44 UTC 2016


On Mon, Jan 18, 2016, Marcos Bontempo wrote:

> Hello,
> I wrote a C code which enter in FIPS mode with fips_mod_set(1). 
> But, when I call MD5 functions after setting FIPS mode, I get this error:
> md5_dgst.c(75): OpenSSL internal error, assertion failed: Low level API call to digest MD5 forbidden in FIPS mode! Aborted.
> Does anybody know what is wrong? How can I correct it?
> Any tip will be very helpful,Thanks. 		 	   		  

As well as the fact that MD5 is forbidden in FIPS mode you also have to use
the EVP API for digests.

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org


More information about the openssl-users mailing list