my company is trying to get our OpenSSL 1.0.2l software (it's compiled in FIPS mode with the FIPS canister) FIPS certified, but I am having difficulty generating RSA keys according to the FIPS 186-4 testing format specified in (http://csrc.nist.gov/groups/STM/cavp/documents/dss2/rsa2vs.pdf).
I need to generate the following parameters using OpenSSL's API:
d. Where e is the public exponent,
q are the prime numbers used for RSA key generation,
n is simply
d is the private exponent, and
seed is the value given to the PRNG to generate the prime numbers.
The problem is that I need to be able to access the
seed value used in OpenSSL's RSA key generation just for FIPS testing purposes, but I have no clue where the
seed value is stored/generated. I also might need to know how to set the
seed value to an exact value. I am using the built in PRNG for openssl-fips.