generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Update README.FIPS for new FIPS 2.0 testvectors.

Browse Source
This commit is contained in:
Dr. Stephen Henson 2011-10-12 18:48:01 +00:00
parent 7fc78f11e8
commit ce01482e0f
1 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
README.FIPS
View File

@ -9,7 +9,7 @@ make clean
To build the module do: To build the module do:
./config fipscanisterbuild ./config fipscanisteronly
make make
Build should complete without errors. Build should complete without errors.
@ -23,18 +23,21 @@ again should complete without errors.
Run test vectors: Run test vectors:
1. Download an appropriate set of testvectors from www.openssl.org/docs/fips 1. Download an appropriate set of testvectors from www.openssl.org/docs/fips
those for 2007 are OK. only the fips-2.0 testvector files are usable for complete tests.
2. Extract the files to a suitable directory. 2. Extract the files to a suitable directory.
3. Run the test vector perl script, for example: 3. Run the test vector perl script, for example:
cd fips cd fips
perl fipsalgtest.pl --disable-v2 --dir=/wherever/stuff/was/extracted perl fipsalgtest.pl --dir=/wherever/stuff/was/extracted
4. It should say "passed all tests" at the end. Report full details of any 4. It should say "passed all tests" at the end. Report full details of any
failures. failures.
If you wish to use the older 1.2.x testvectors (for example those from 2007)
you need the command line switch --disable-v2 to fipsalgtest.pl
Examine the external symbols in fips/fipscanister.o they should all begin Examine the external symbols in fips/fipscanister.o they should all begin
with FIPS or fips. One way to check with GNU nm is: with FIPS or fips. One way to check with GNU nm is:
@ -117,8 +120,6 @@ reports.
Known issues: Known issues:
Algorithm tests are pre-2011.
The fipslagtest.pl script wont auto run new algorithm tests such as DSA2.
Code needs extensively reviewing to ensure it builds correctly on Code needs extensively reviewing to ensure it builds correctly on
supported platforms and is compliant with FIPS 140-2. supported platforms and is compliant with FIPS 140-2.
The "FIPS capable OpenSSL" is still largely untested, it builds and runs The "FIPS capable OpenSSL" is still largely untested, it builds and runs