On 04/06/2015 10:59 AM, Nicolae Rosia wrote: > I see. Still, the documentation sent to the lab would be helpful to > the community to better understand/review the existing code. We don't send any documentation to the test labs unless they are performing validations actions for us, for which we must pay them. Also FYI for change letters the (unique/creative component of the) documentation is trivial. As with most FIPS 140-2 documentation such paperwork is very low in nutritional value and of essentially no value to the end user. In particular it isn't going to help anyone "better understand/review" the existing code. The code itself is open source, so as Obi-Wan said, "use the source, Luke". -Steve M. -- Steve Marquess OpenSSL Software Foundation, Inc. 1829 Mount Ephraim Road Adamstown, MD 21710 USA +1 877 673 6775 s/b +1 301 874 2571 direct marquess at opensslfoundation.com marquess at openssl.com gpg/pgp key: http://openssl.com/docs/0x6D1892F5.asc