>Is there anyway to make the FIPS mode always enabled by default in the library layer, so that there's no need to invoke the FIPS_mode_set API? No. You'd have to end up calling some explicit routine of your own which called FIPS_mode_set.