3.0 FIPS related questions

Matt Caswell matt at openssl.org
Wed Mar 25 09:15:05 UTC 2020



On 24/03/2020 15:02, Salz, Rich wrote:
>  
>>    > The second question is somewhat related.  Has there been a decision yet whether the FOM 3.0 will go through a 140-2 or a 140-3 validation?
>     
>>    We are going through 140-2.
>   
> Has the list of validated platforms been made public yet?

No, not yet. Although I don't see a great reason why they shouldn't be.
I'll raise it and check everyone is happy to do so.

> 
> For people using a different platform, will they still be able to claim "vendor affirmed" if they follow particular build steps?
> 

Yes, we believe this will remain as per the previous module. The build
process will be different, but the ability to vendor affirm other
platforms should remain.

Matt


More information about the openssl-users mailing list