From: Dr. Stephen Henson <steve@openssl.org>
Date: Thu, 10 Mar 2011 14:01:34 +0000 (+0000)
Subject: Update status.
X-Git-Tag: OpenSSL-fips-2_0-rc1~674
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=4d5d28675ebe00fbe2bbf89d80122625ae0c13cb;p=oweals%2Fopenssl.git

Update status.
---

diff --git a/README.FIPS b/README.FIPS
index 5e3b5ab79c..5197276740 100644
--- a/README.FIPS
+++ b/README.FIPS
@@ -44,10 +44,11 @@ Known issues:
 
 Algorithm tests are pre-2011.
 The fipslagtest.pl script wont auto run new algorithm tests such as DSA2.
-No ECDH.
-No primitives tests for ECDH/DH
+Usage of ECDH/DH needs review and adding appropriate self tests.
 Selftests need updating with larger key sizes in some cases and redundant
 tests pruned.
-No SP800-90 PRNG.
+SP800-90 DRBG needs more work: health checks, continuous PRNG test,
+entropy gathering, security checks in algorithms, add appropriate RAND method
+for use by rest of OpenSSL.
 No CMAC.
 No CCM.