Tag Info

New answers tagged

1

It is possible for a module to be FIPS 140 Validated and include non-validated features like ECIES. You can see multiple instances of this in various validation documents: Blackberry Validated FIPS 140-1 and FIPS 140-2 Cryptographic Modules (2013) (includes BSAFE) The trick is that to use those modules in a FIPS-compliant way, you need to only use the ...


3

I haven't tested OpenSSL but I'm pretty sure it implements AES-CBC correctly. Your program, however, obviously uses different data, so it isn't surprising that you get different results. The test vectors are given out in hexadecimal. For example KEY = 0000000000000000000000000000000000000000000000000000000000000000 IV = 00000000000000000000000000000000 ...


0

If the module you're using is FIPS 140-2 validated I recommend you read the publicly available Security Policy. This as well as the product documentation should tell you if you are able to export the private key. The Security Policy is available here: http://csrc.nist.gov/groups/STM/cmvp/validation.html It could be that the module does not support AES key ...



Top 50 recent answers are included