Re: Missing Appendix in the FIPS 140-3 Security Policy

Hello Tomáš,

Can you provide further information on porting the Module to platforms 
apart from the Tested Configurations in Table 2?  This does not seem to be 
addressed in the security policy.  Or is the previous method of satisfying 
vendor affirmation no longer being supported?

Thanks,
Zach Zuzzio

On Tuesday, April 1, 2025 at 11:15:23 AM UTC-5 Tomas Mraz wrote:

> Hello Zach,
>
> there is no such Appendix A. The sentence is a leftover from previous
> revisions of the SP document and should be just deleted.
>
> Kind regards,
>
> Tomas Mraz, OpenSSL
>
> On Tue, 2025-04-01 at 06:50 -0700, 'Zach Zuzzio' via openssl-users
> wrote:
> > The "29 December 2023" dated version FIPS 140-3 security policy
> > linked on the NIST CMVP page for Certificate #4985 can be found here:
> > 
> https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4985
> > 
> > Section 11.a has the following statement:
> > 
> > "Note: The instructions for building and installing OpenSSL 3.1.2 on
> > other platforms can be found in the platform-specific guidance
> > provided in INSTALL.md and README-FIPS.md in the OpenSSL 3.1.2
> > distribution package. Please see Appendix A for further information
> > on porting the Module to platforms apart from the Tested
> > Configurations in Table 2."
> > 
> > The section reads "Please see Appendix A ..." and there is no
> > Appendix section in this version of the security policy document. Can
> > a corrected security policy with the missing Appendix be linked to
> > certificate #4985?
> > 
> > For more information on how and why we collect your personal
> > information, please visit our Privacy Policy.
> > -- 
> > You received this message because you are subscribed to the Google
> > Groups "openssl-users" group.
> > To unsubscribe from this group and stop receiving emails from it,
> > send an email to [email protected]
> > To view this discussion visit
> > 
> https://groups.google.com/a/openssl.org/d/msgid/openssl-users/694ba150-120f-4824-815d-a0286ac9738dn%40openssl.org
> > .
>
> -- 
> Tomáš Mráz, OpenSSL
>
>
-- 


*For more information on how and why we collect your personal 
information, please visit our Privacy Policy 
<https://www.motorolasolutions.com/en_us/about/privacy-policy.html?elqTrackId=8980d888905940e39a2613a7a3dcb0a7&elqaid=2786&elqat=2#privacystatement>.*

-- 
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/0c5d89d4-c044-4f25-9c4f-e2c39346b497n%40openssl.org.