[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: FIPS Certification
From: |
Simon Josefsson |
Subject: |
Re: FIPS Certification |
Date: |
Thu, 08 Oct 2009 20:09:47 +0200 |
User-agent: |
Gnus/5.110011 (No Gnus v0.11) Emacs/23.1 (gnu/linux) |
"Hoyt, David" <address@hidden> writes:
> Is or will there be an effort to become FIPS certified? If so, is
> there a schedule laid out for the process? Is there a webpage I can
> look at to keep myself up-to-date on the certification process?
All the crypto in GnuTLS normally happens in libgcrypt, and I recall
seeing libgcrypt mentioned on the list of projects underway of becoming
FIPS-certified some time ago. Also, it is possible to replace the
crypto calls to your own library on the fly, see:
http://www.gnu.org/software/gnutls/reference/gnutls-crypto.html
There may be more involved, but this is as much as I am aware of.
I am certainly interested in seeing GnuTLS FIPS-certified, but if
anything more than FIPS-certifying libgcrypt is required, that will
require funding from someone.
Thanks,
/Simon