In FIPS mode only use "Generation by Testing Candidates" equivalent.