[openssl-users] Digest MD5 forbidden in FIPS mode

Dr. Stephen Henson steve at openssl.org
Tue Jan 19 03:07:44 UTC 2016

On Mon, Jan 18, 2016, Marcos Bontempo wrote:

> Hello,
> I wrote a C code which enter in FIPS mode with fips_mod_set(1). 
> But, when I call MD5 functions after setting FIPS mode, I get this error:
> md5_dgst.c(75): OpenSSL internal error, assertion failed: Low level API call to digest MD5 forbidden in FIPS mode! Aborted.
> Does anybody know what is wrong? How can I correct it?
> Any tip will be very helpful,Thanks. 		 	   		  

As well as the fact that MD5 is forbidden in FIPS mode you also have to use
the EVP API for digests.

Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org

More information about the openssl-users mailing list