From c9adde0699c140840572f3bae976b8bae94fc7af Mon Sep 17 00:00:00 2001 From: "Dr. Stephen Henson" Date: Wed, 4 May 2011 18:43:32 +0000 Subject: Update status. --- README.FIPS | 10 ++-------- 1 file changed, 2 insertions(+), 8 deletions(-) (limited to 'README.FIPS') diff --git a/README.FIPS b/README.FIPS index e0c11c2956..3b51d4de45 100644 --- a/README.FIPS +++ b/README.FIPS @@ -76,14 +76,8 @@ Known issues: Algorithm tests are pre-2011. The fipslagtest.pl script wont auto run new algorithm tests such as DSA2. -Usage of ECDH/DH needs review and whether any KDFs need to be implemented. -Selftests need updating with larger key sizes in some cases and redundant -tests pruned. -SP800-90 DRBG needs more work: check for compliance, continuous PRNG test -when entropy gathering, periodic health tests. -Some algorithms need to check security strength of PRNG: keygen etc. -No CCM. -No XTS. +Code needs extensively reviewing to ensure it builds correctly on +supported platforms and is compliant with FIPS 140-2. The "FIPS capable OpenSSL" is not yet complete: meaning that the rest of OpenSSL doesn't always use the correct FIPS module APIs and block others in FIPS mode. -- cgit v1.2.3