3 ms·
Except, for example, FIPS support mandates availability of operating modes which are broken by design.
by maaku 13y ago
Except, for example, FIPS support mandates availability of operating modes which are broken by design.
- jmspring 13y agoThere are ways of crafting the software that could make sure the broken operating modes aren't necessarily part of the FIPS build profile. More than one company I have worked at built on top of OpenSSL and went for FIPS compliance. Sometimes, if you want to be able to qualify for contracts that require things like FIPS, building off a base is better than starting from complete scratch.