Submitted by: Tomas Mraz <tmraz@redhat.com>
Reviewed by: steve

Fix usage message.

Add explanatory comments to health check code.

DSA parameter validity and EC public key validity.

prediction resistance requests. Although SP 800-90 is arguably unclear
on whether this is necessary adding an additional check has minimal
penalty (very few applications will make an explicit reseed request).

One demand health check function.

Perform generation test in fips_test_suite.

Option to skip dh test if fips_test_suite.

Other Intel processors +5%, Opteron -2%.

t and s do not need to have independent values after the first pass
so set t = s.

Simplify HMAC selftest as each test currently uses the same key and
hash data.

for all DRBG combinations.

(strength can be queried using FIPS_drbg_get_strength ) and adds a
substantial extra overhead to health check (need to check every combination
of parameters).

don't set type in FIPS_drbg_new().

http://crypto.stanford.edu/vpaes/ for background information.
It's not integrated into build system yet.

extra bogus lines. Update fipsalgtest.pl to tolerate the old format.

tests and POST code.

Add abbreviated DRBG KAT for POST which only performs a single generate
operations instead of four.

produce an error (CVE-2011-3207)