Talk:FIPS Warnings and Cautions

From OpenSSLWiki
Revision as of 23:08, 27 January 2014 by Matt (talk | contribs) (Snail mail CD question)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigationJump to search

Distribution from Snail Mail CD

"You must use a source distribution file from an official snail-mailed CD."

I understood it to be the case that you CAN download it, but if you do you MUST verify the HMAC-SHA-1 digest with an independantly validated FIPS 140-2 product. Getting access to such a product may be very difficult for most people!!