[openssl-users] OpenSSL - FIPS 140 Compliant

Steve Marquess marquess at openssl.com
Wed Aug 17 15:56:35 UTC 2016

On 08/17/2016 09:10 AM, Vikram Kamaraj - ERS, HCL Tech wrote:
> Hello OpenSSL,
> Which version of OpenSSL is FIPS 140 compliant?

None. A more useful question to ask is "for which versions of OpenSSL
are compatible FIPS modules available?". The answer to that is
1.0.1/1.0.2 with the OpenSSL FIPS Object Module 2.0, and (in a year or
two) OpenSSL 1.1 with a new FIPS module still to be developed and
validated (but in progress).

You may want to take a look at the OpenSSL FIPS module user guide:


The background discussion there will still be relevant for the new FIPS

-Steve M.

Steve Marquess
OpenSSL Validation Services, Inc.
1829 Mount Ephraim Road
Adamstown, MD  21710
+1 877 673 6775 s/b
+1 301 874 2571 direct
marquess at openssl.com
gpg/pgp key: http://openssl.com/docs/0x6D1892F5.asc

More information about the openssl-users mailing list