There are ways of crafting the software that could make sure the broken operating modes aren't necessarily part of the FIPS build profile. More than one compan

There are ways of crafting the software that could make sure the broken operating modes aren't necessarily part of the FIPS build profile. More than one company I have worked at built on top of OpenSSL and went for FIPS compliance. Sometimes, if you want to be able to qualify for contracts that require things like FIPS, building off a base is better than starting from complete scratch.