my company is trying to get our OpenSSL 1.0.2l software (it's compiled in FIPS mode with the FIPS canister) FIPS certified, but I am having difficulty generating RSA keys according to the FIPS 186-4 testing format specified in (http://csrc.nist.gov/groups/STM/cavp/documents/dss2/rsa2vs.pdf).
I need to generate the following parameters using OpenSSL's API: e
, seed
, p
, q
, n
, d
. Where e is the public exponent, p
and q
are the prime numbers used for RSA key generation, n
is simply p*q
, and d
is the private exponent, and seed
is the value given to the PRNG to generate the prime numbers.
The problem is that I need to be able to access the seed
value used in OpenSSL's RSA key generation just for FIPS testing purposes, but I have no clue where the seed
value is stored/generated. I also might need to know how to set the seed
value to an exact value. I am using the built in PRNG for openssl-fips.