Useful Links

• OpenSSL
  • Apache-SSL(English)
  • Apache-SSL(German)
  • mod_ssl
  • stunnel
  • sslwrap
• Cryptographic Module Validation Program (FIPS 140-2)
• FIPS 140-2 Modules Information (extracted from NIST database)
• FIPS 140-2 Certificates
• FIPS 140-2 Testing Laboratories
• FIPS 140-2 Vendors
• OpenSSL Software Foundation
• Open Source Software Institute
• Smartcard Developer Association
• PKCS#11 Standard (Cryptoki)

Security Related Books

• SSL and TLS: Designing and Building Secure Systems SSL and TLS protocol (2001)
• Network Security with OpenSSL Using OpenSSL (2002)

Standards

• Public-Key Cryptography Standards (RSA Laboratories) (Wikipedia)
• PKCS#11 Standard (HTML) (Wikipedia)
• NIST SP 800-53 Security Controls (HTML) (PDF @ NIST)
• OASIS Key Management Interoperability Protocol

Open Source FIPS-140 Modules

• OpenSSL
  • 1.1.1 (OpenSSL-0.9.7j)
  • 1.1.2 (OpenSSL-0.9.7m)
  • 1.2 (OpenSSL-0.9.8j)
  • 1.2 (OpenSSL-0.9.8j)(Runtime)
• Crypto++
  • 5.0.4
  • 5.2.3
  • 5.3.0
• Network Security Services (NSS) Network Security Services (NSS)
  • 3.2.2 (Level-1)
  • 3.2.2 (Level-2)
  • 3.11.4 (Level-2)
  • 3.11.4 (Level-1)
• OpenSSL Based Modules
  • Valicert/Tumbleweed
  • IBM
  • IBM
  • OSSI
  • Attachmate
  • IBM
  • UGS
  • GlobalSCAPE
  • OSSI
  Note: there are a lot more OpenSSL based cryptographic modules than those listed here. These modules make it clear in their security policy documents that OpenSSL is being used.

PKI Resources

• CA/Browser Forum
• Gatekeeper (Australian Federal Government)
• Queensland Government PKI (Queensland State Government)
• WebTrust

Copyright © 2010 Cryptsoft Pty Ltd