use X9.31 keygen by default in FIPS mode