Remove fipscanister from Configure, delete fips directory Reviewed-by: Tim Hudson <tjh@openssl.org>
Add single call public key sign and verify functions.
Allow for dynamic base in Win64 FIPS module.
Constify RSA signature buffer.
Move FIPS RSA function definitions to fips.h New function to lookup digests by NID in module. Minor optimisation: if supplied hash is NULL to FIPS RSA functions and we are using PKCS padding get digest NID from otherwise unused saltlen parameter instead.
Return error codes for selftest failure instead of hard assertion errors.
Add non-FIPS algorithm blocking and selftest checking.
Change FIPS source and utilities to use the "FIPS_" names directly instead of using regular OpenSSL API names.
Fix error codes.
Add sign/verify digest API to handle an explicit digest instead of finalising a context.
Redirect FIPS memory allocation to FIPS_malloc() routine, remove OpenSSL malloc dependencies.
Change OPENSSL_FIPSEVP to OPENSSL_FIPSAPI as it doesn't just refer to EVP any more. Move locking #define into fips.h. Set FIPS locking callbacks at same time as OpenSSL locking callbacks.
And so it begins... again. Initial FIPS 140-2 code ported to HEAD. Doesn't even compile yet, may have missing files, extraneous files and other nastiness. In other words: it's experimental ATM, OK?