Re: Is Explicit self-test needed for openssl 3.1.2 (FIPS 140-3).

Tomas Mraz <[email protected]> Fri, 08 Aug 2025 11:47:59 +0200
Newsgroups gmane.comp.encryption.openssl.user
Message-ID <[email protected]>
It was never necessary to call FIPS self tests explicitly with our FIPS
modules. If you want to use the OpenSSL FIPS module(s) in FIPS
compliant way, please always refer to the respective FIPS Security
Policy document of the particular module that you can find on the NIST
FIPS module web site.

Regards,

Tomas Mraz, Public Support and Security Manager, OpenSSL Foundation

On Wed, 2025-08-06 at 22:42 -0700, omi jha wrote:
> Hi,
> I recently upgraded to from 3.0.9 to openssl 3.1.2 (FIPS 140-3), I
> was using self test explicitly for FIPS module  in my code. After
> upgrading to Openssl 3.1.2 (FIPS 140-3) , do we still require
> explicit self-test or it does internally , shall i remove it  form my
> code? Any reference/link which talks about this would be helpful.
> 
> Thanks,
> Om
> -- 
> You received this message because you are subscribed to the Google
> Groups "openssl-users" group.
> To unsubscribe from this group and stop receiving emails from it,
> send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
> To view this discussion visit
> https://groups.google.com/a/openssl.org/d/msgid/openssl-users/afa87e00-6cbf-4290-a14d-f8b3fcc9e064n%40openssl.org
> .

-- 
Tomáš Mráz, Public Support and Security Manager, OpenSSL Foundation
Join the Code Protectors or support us on Github Sponsors
https://openssl-foundation.org/donate/

-- 
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/0a574488c6ecc324d734d983f6d49aaa03c66be8.camel%40openssl.org.