Intel SGX with OpenSSL FIPS mode

[Anandakumar]

Hello All,

We have been testing our Intel SGX implementation with the SGXSSL encryption library. We can build and run the OpenSSL in FIPS mode, which is validated and tested under FIPS compliance regulations.

Is there any way to build the SGXSSL with FIPS mode OpenSSL? 

Please share your experience and thoughts about this.

Thanks,

Anand

[Sahira_Intel]

Hey Anand,

I am checking with the SGX SSL team on this and will get back to you.

Sincerely,

Sahira

[Sahira_Intel · Accepted solution]

Hi Anand,

Sorry for the late reply. The latest SGXSSL is based on OpenSSL 1.1.1, which doesn't support FIPS mode. So that functionality is not supported.

OpenSSL however does support FIPS mode.

Sincerely,

Sahira