Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Won an application that uses FIPS 140-1/2 validated OpenSSL libraries for all cryptography still require a separate FIPS 140-2 validation?

April 26, 2017application cryptography FIPS Libraries OpenSSL require uses validated

0

Posted

Won an application that uses FIPS 140-1/2 validated OpenSSL libraries for all cryptography still require a separate FIPS 140-2 validation?

1 Answer

0

Posted

The OpenSSL user doesn’t need any additional validations (if OpenSSL supplies _ all _ relevant crypto) because NIST/CSE will already have validated the OpenSSL libraries when used in accordance with the Security Policy.