[openssl-users] FIPS, continuous tests, and error reporting

Dr. Stephen Henson steve at openssl.org
Thu Feb 19 14:49:33 UTC 2015


On Thu, Feb 19, 2015, jonetsu wrote:

> 
> 
> -----Original Message----- 
> > From: "Salz, Rich" <rsalz at akamai.com> 
> > To: openssl-users at openssl.org 
> > Date: 02/19/15 07:43 
> > Subject: Re: [openssl-users] FIPS, continuous tests, and error reporting 
> > 
> > > For that matter and in a general sense, so far I've seen that many encryption
> > > methods do not return any error code.  How does error reporting generally
> > > works ?
> > 
> > Really?  Which ones?
> 
> For instance, any of the void DES_*_encrypt().  This cursory observation is also supported by a vendor application code such as:
> 

The low level cipher and digest APIs cannot be used in FIPS mode: you have to
use EVP.

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org


More information about the openssl-users mailing list