Other OpenSSL-based crypto modules FIPS 140 validated?

Nathan P. Bardsley nathan at player.org
Mon Oct 6 16:49:24 EDT 2003


Anecdotally, I've heard that there are many, but almost all of them were 
done by vendors for embedding in their proprietary products.

At 12:38 PM 10/6/2003, Ronald Perez wrote:
>While at the NIST FIPS 140 site earlier today (looking for that mysterious
>nCipher certificate), I noticed that certificate #350 was issued last
>Friday -- for "IBM Crypto for C (ICC)".
>
>I think that the interesting thing about this crypto [SW] module and cert
>is that it's based on OpenSSL. I know we've discussed the [forthcoming]
>validation of OpenSSL itself, and we know about the Crypto++ and
>Netscape/Sun/Mozilla open source crypto modules, but my question now is,
>are there any other "OpenSSL-based" FIPS 140 validated crypto modules, or
>is this the first?
>
>-Ron
>
>Disclaimer: although I'm employed by IBM, I had nothing to with this
>validation or with ICC (it's a big place)
>
>---------------------------------------------------------------------
>The Cryptography Mailing List
>Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com



More information about the cryptography mailing list