On Wed, 25 Mar 2015 17:03:04 -0400 Steve Marquess <marquess at openssl.com> wrote: > I wasn't aware the Linux kernel (the real one, not proprietary > commercial derivatives) had a "FIPS" mode. Please enlighten me. It could very well be that the word 'mode' is not the right one. 'option' would perhaps be better. This article from 2009 sets the foundation: http://www.guerilla-ciso.com/archives/793 I wonder, 6 years later, what the kernel fips option implies. Maybe I could try to contact Neil Horman and?or look into the sources.
