openssl-users Digest, Vol 69, Issue 7

[Rakesh Parihar]

Hi Mark,

Thanks for your response. Let me check with the details you provided.


Rakesh Parihar

Sr. Software Engineer

rakesh.parihar at encora.com <mailto:your.name at encora.com>
Ahmedabad, IN

[cid:e36974b4-09e5-4d04-aa9a-0e25aa504920]
encora.com<http://www.encora.com/>

________________________________
From: Mark Minnoch <mark at keypair.us>
Sent: 10 August 2020 21:28
To: Rakesh Parihar <Rakesh.Parihar at encora.com>
Subject: Fwd: openssl-users Digest, Vol 69, Issue 7

Hi Rakesh,

I saw your post on the openssl-users list. We have a customer that is testing KeyPair's FIPS module Cert. #3503<https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/3503> (based on the OpenSSL FOM) on Android 64-bit. We made some minor changes to the Configure file (attached). You will need to follow the instructions in our Security Policy<https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp3503.pdf> (Appendix A) to download the FIPS module distribution (from Oracle) and replace the Configure file with the attached Configure file.

As you probably know, you are not allowed to make changes to the build process for the OpenSSL FOM Cert. #2398. We are enhancing the work the Oracle performed to update the OpenSSL FOM. Please let me know if you are successful using the KeyPair FIPS module in your testing.

Mark J. Minnoch
Co-Founder, CISSP
KeyPair Consulting
+1 (805) 550-3231<tel:(805)%20550-3231> mobile
https://KeyPair.us<https://keypair.us/>
https://www.linkedin.com/in/minnoch

We expertly guide technology companies in achieving their FIPS 140 goals

UPDATED Blog post: RIP FIPS 186-2<https://keypair.us/2019/08/rip-fips-186-2/>


---------- Forwarded message ---------
From: <openssl-users-request at openssl.org<mailto:openssl-users-request at openssl.org>>
Date: Mon, Aug 10, 2020 at 3:56 AM
Subject: openssl-users Digest, Vol 69, Issue 7
To: <openssl-users at openssl.org<mailto:openssl-users at openssl.org>>


Send openssl-users mailing list submissions to
        openssl-users at openssl.org<mailto:openssl-users at openssl.org>

To subscribe or unsubscribe via the World Wide Web, visit
        https://mta.openssl.org/mailman/listinfo/openssl-users
or, via email, send a message with subject or body 'help' to
        openssl-users-request at openssl.org<mailto:openssl-users-request at openssl.org>

You can reach the person managing the list at
        openssl-users-owner at openssl.org<mailto:openssl-users-owner at openssl.org>

When replying, please edit your Subject line so it is more specific
than "Re: Contents of openssl-users digest..."
Today's Topics:

   1. Help - Building OpenSSL FIPS for 64 bit Android (Rakesh Parihar)



---------- Forwarded message ----------
From: Rakesh Parihar <Rakesh.Parihar at encora.com<mailto:Rakesh.Parihar at encora.com>>
To: "openssl-users at openssl.org<mailto:openssl-users at openssl.org>" <openssl-users at openssl.org<mailto:openssl-users at openssl.org>>
Cc:
Bcc:
Date: Mon, 10 Aug 2020 10:55:52 +0000
Subject: Help - Building OpenSSL FIPS for 64 bit Android
Hi All,

I am seeking help on generating FIPS compliance OpenSSL libs for Android Native Application.
I am trying to build openssl-1.0.2t with the FIPS module openssl-fips-2.0.16 to support 64-bit android devices, I have tried following the steps on the Openssl wiki <https://wiki.openssl.org/index.php/FIPS_Library_and_Android> and didn't found any specific verson dependency for 64bit support for android with FIPS.
I also tried using a script <https://github.com/ColdDragon/android-build-openssl-fips> found on GitHub that combines the building of the FIPS module and Openssl, I seem to be having issues with this as well. I have tried with many Openssl and FIPS versions to build for 64bit but not luck.
Any pointers regarding the 64bit supported version of Openssl and FIPS module for Andorid and any help in building a FIPS compliant Openssl would be appreciated.


Thanks & Regards


Rakesh Parihar

Sr. Software Engineer

rakesh.parihar at encora.com <mailto:your.name at encora.com>
Ahmedabad, IN

[cid:173d90ac503cf1269a21]
encora.com<http://www.encora.com/>

_______________________________________________
openssl-users mailing list
openssl-users at openssl.org<mailto:openssl-users at openssl.org>
https://mta.openssl.org/mailman/listinfo/openssl-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mta.openssl.org/pipermail/openssl-users/attachments/20200810/11632313/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Outlook-xuepomab.png
Type: image/png
Size: 10409 bytes
Desc: Outlook-xuepomab.png
URL: <https://mta.openssl.org/pipermail/openssl-users/attachments/20200810/11632313/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Outlook-ri5wwbmc.png
Type: image/png
Size: 10409 bytes
Desc: Outlook-ri5wwbmc.png
URL: <https://mta.openssl.org/pipermail/openssl-users/attachments/20200810/11632313/attachment-0003.png>