Security of OpenSSL encryption tool uncertain

24.07.2006

WHAT: The OSSI is seeking certification that would allow OpenSSL cryptographic modules to be used by federal agencies.

WHY: Validated OpenSSL would be available for free. Currently, agencies have to pay license fees for proprietary encryption tools.

STATUS: OpenSSL certification was suspended after originally being validated by the National Institute of Standards and Technology and the Communications Security Establishment of Canada.