summaryrefslogtreecommitdiffstats
path: root/README.FIPS
diff options
context:
space:
mode:
authorDr. Stephen Henson <steve@openssl.org>2011-03-10 14:01:34 +0000
committerDr. Stephen Henson <steve@openssl.org>2011-03-10 14:01:34 +0000
commit4d5d28675ebe00fbe2bbf89d80122625ae0c13cb (patch)
tree03cddf6d069fdf066e5f91598ef53fbc9fae9d45 /README.FIPS
parent1acc24a8ba4ea461b5e2ae94b7c9b625dc7d4c52 (diff)
Update status.
Diffstat (limited to 'README.FIPS')
-rw-r--r--README.FIPS7
1 files changed, 4 insertions, 3 deletions
diff --git a/README.FIPS b/README.FIPS
index 5e3b5ab79c..5197276740 100644
--- a/README.FIPS
+++ b/README.FIPS
@@ -44,10 +44,11 @@ Known issues:
Algorithm tests are pre-2011.
The fipslagtest.pl script wont auto run new algorithm tests such as DSA2.
-No ECDH.
-No primitives tests for ECDH/DH
+Usage of ECDH/DH needs review and adding appropriate self tests.
Selftests need updating with larger key sizes in some cases and redundant
tests pruned.
-No SP800-90 PRNG.
+SP800-90 DRBG needs more work: health checks, continuous PRNG test,
+entropy gathering, security checks in algorithms, add appropriate RAND method
+for use by rest of OpenSSL.
No CMAC.
No CCM.