If you don't know or care what FIPS 140-2 is then heave a big sigh of relief and move on. Over a month ago[1] I noted that the four typographical errors from the CMVP "execution" of the "hostage" platforms[2] had still not been corrected. Ten weeks have now passed, and not only are those typos still present but I'm told by our test lab that the CMVP has stated they will deliberately remain uncorrected until the oldest of our pending "change letter" submissions is accepted (2.0.10; a 2.0.11 change letter is also pending). That could take months still; in the past change letter approvals have taken as long as six months. That connection makes no sense at all to me, but it's not the first time I've been completely befuddled. -Steve M. [1] https://mta.openssl.org/pipermail/openssl-users/2015-July/001706.html [2] http://openssl.com/fips/aftermath.html -- Steve Marquess OpenSSL Software Foundation, Inc. 1829 Mount Ephraim Road Adamstown, MD 21710 USA +1 877 673 6775 s/b +1 301 874 2571 direct marquess at opensslfoundation.com marquess at openssl.com gpg/pgp key: http://openssl.com/docs/0x6D1892F5.asc
