Some good news for a change, but if you neither know nor care what FIPS 120-2 is you're not missing anything. The final "X9.31 RNG transition" change letter update for the third validation (#2398) of the OpenSSL FIPS Object Module v2.0 trilogy (#1747/#2398/#2747) was approved yesterday. This approval means that OpenSSL FIPS module is now past any risk of de-listing to "not to be used" status as has happened to so many other validations recently[*]. All 120+ platforms listed across those three validations for multiple module revisions are valid. Approval of this validation took a lot longer than the essentially identical submissions for the other two validations done at the same time; presumably because the CMVP decided to roll up multiple pending change letters for the #2398 validation. This recently approved submission includes the addition of some new platforms at revision 2.0.12 along with the RNG transition wordsmithing. Thanks again to DataGravity for making this "RNG transition" compliance possible by paying the test lab fees. -Steve M. [*] The de-listed validations can be found at http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140val-historical.htm -- Steve Marquess OpenSSL Validation Services, Inc. 1829 Mount Ephraim Road Adamstown, MD 21710 USA +1 877 673 6775 s/b +1 301 874 2571 direct marquess at openssl.com gpg/pgp key: http://openssl.com/docs/0x6D1892F5.asc
