diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2011-03-10 15:01:34 +0100 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2011-03-10 15:01:34 +0100 |
| commit | 4d5d28675ebe00fbe2bbf89d80122625ae0c13cb (patch) | |
| tree | 03cddf6d069fdf066e5f91598ef53fbc9fae9d45 /README.FIPS | |
| parent | Make no-ec2m work again. (diff) | |
| download | openssl-4d5d28675ebe00fbe2bbf89d80122625ae0c13cb.tar.xz openssl-4d5d28675ebe00fbe2bbf89d80122625ae0c13cb.zip | |
Update status.
Diffstat (limited to 'README.FIPS')
| -rw-r--r-- | README.FIPS | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/README.FIPS b/README.FIPS index 5e3b5ab79c..5197276740 100644 --- a/README.FIPS +++ b/README.FIPS @@ -44,10 +44,11 @@ Known issues: Algorithm tests are pre-2011. The fipslagtest.pl script wont auto run new algorithm tests such as DSA2. -No ECDH. -No primitives tests for ECDH/DH +Usage of ECDH/DH needs review and adding appropriate self tests. Selftests need updating with larger key sizes in some cases and redundant tests pruned. -No SP800-90 PRNG. +SP800-90 DRBG needs more work: health checks, continuous PRNG test, +entropy gathering, security checks in algorithms, add appropriate RAND method +for use by rest of OpenSSL. No CMAC. No CCM. |