2011-01-30 01:05:25 +08:00
|
|
|
Preliminary status and build information for FIPS module v2.0
|
|
|
|
|
|
|
|
|
|
To build the module do:
|
|
|
|
|
|
|
|
|
|
./config fipscanisterbuild
|
|
|
|
|
make
|
|
|
|
|
|
|
|
|
|
Build should complete without errors.
|
|
|
|
|
|
|
|
|
|
Run test suite:
|
|
|
|
|
|
|
|
|
|
test/fips_test_suite
|
|
|
|
|
|
|
|
|
|
again should complete without errors.
|
|
|
|
|
|
2011-02-02 01:14:07 +08:00
|
|
|
Run test vectors:
|
|
|
|
|
|
|
|
|
|
1. Download an appropriate set of testvectors from www.openssl.org/docs/fips
|
|
|
|
|
those for 2007 are OK.
|
|
|
|
|
|
|
|
|
|
2. Extract the files to a suitable directory.
|
|
|
|
|
|
|
|
|
|
3. Run the test vector perl script, for example:
|
|
|
|
|
|
|
|
|
|
cd fips
|
|
|
|
|
perl fipsalgtest.pl --dir=/wherever/stuff/was/extracted
|
|
|
|
|
|
|
|
|
|
4. It should say "passed all tests" at the end. Report full details of any
|
|
|
|
|
failures.
|
|
|
|
|
|
2011-01-30 01:05:25 +08:00
|
|
|
|
|
|
|
|
Known issues:
|
|
|
|
|
|
|
|
|
|
No Windows support.
|
|
|
|
|
Algorithm tests are pre-2011.
|
|
|
|
|
No SP800-90 PRNG.
|
|
|
|
|
No ECDSA2 support.
|
2011-02-02 01:14:07 +08:00
|
|
|
No DSA2 support: work in progress.
|
2011-01-30 01:05:25 +08:00
|
|
|
No GCM.
|
|
|
|
|
No CMAC.
|
