For a basic introduction, see below. Thanks to multiple platform sponsorships, the 2.0 validations include the largest number of formally tested platforms for any validated module.

The most recent open source based validation of a cryptographic module (Module) compatible with the OpenSSL 1.0.1 and 1.0.2 libraries is v2.0.16, FIPS 140-2 certificate #1747. This Module is documented in the 2.0 User Guide; the source code, and Security Policy are also available.

For convoluted bureaucratic reasons, the same module is also available under the validations #2398 (revision 2.0.16) and #2473 (revision 2.0.10).

Here is the complete set of files. Note that if you are interested in the "1747" validation, you only need the three files mentioned above.

KBytes

Date

File

 

Background

Please please read the User Guide.

• OpenSSL itself is not validated. Instead a special carefully defined software component called the OpenSSL FIPS Object Module has been created. This Module was designed for compatibility with OpenSSL so that products using the OpenSSL API can be converted to use validated cryptography with minimal effort.
• The OpenSSL FIPS Object Module validation is "delivered" in source code form, meaning that if you can use it exactly as is and can build it (according to the very specific documented instructions) for your platform, then you can use it as validated cryptography on a "vendor affirmed" basis.
• If even the tiniest source code or build process changes are required for your intended application, you cannot use the open source based validated module directly. You must obtain your own validation.
• None of the validations will work with OpenSSL 1.1.0 or later.