On 4/2/2010 2:00 PM, Wan-Teh Chang wrote:
On Fri, Apr 2, 2010 at 1:42 PM, G. Richard Bellamy
<rbell...@pteradigm.com>  wrote:

My understanding of the FIPS Validation process led me to believe that
modifying any of the source would invalidate the claim of using a FIPS
compliant module. Thus, I thought, I must include only those headers used to
compile the library as it was certified.

If I use the headers from the PKCS #11 website, will the code I write still
be able to claim the use of a FIPS compliant module? Or, conversely, if I
use the headers that ship with NSS am I then not able to make that claim?

You can compile your own code with the PKCS #11 headers from either
NSS or the PKCS #11 website.  It is your own code, not the NSS FIPS
crypto module.

Wan-Teh

I was thinking that perhaps there are inline functions... I should have checked the source first.

Thanks again.

-rb
--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to