Zero ciphertext and plaintext temporary buffers.

Check FIPS_cipher() return value.

Give error for "make depend" in restricted tarball builds.

Document how restricted tarballs work.

Remove more unnecessary files form fips tarball.

Rebuild all FIPS error codes to clean out old obsolete codes.

check on a DRBG of the same type.

from DSA copy q across and if q present generate DH key in the
correct range.

pairwise consistency test interfering with the test.

Set FIPS RAND_METHOD at same time as OpenSSL RAND_METHOD.

Rename drbg_cprng_test to fips_drbg_cprng_test.

Remove rand files from Makefile.fips.

now use an internal RAND_METHOD. All dependencies to OpenSSL standard
PRNG are now removed: it is the applications resposibility to setup
the FIPS PRNG and initalise it.

Initial OpenSSL RAND_init_fips() function that will setup the DRBG
for the "FIPS capable OpenSSL".

used by applications directly and the X9.31 PRNG is deprecated by new
FIPS140-2 rules anyway.

to missing DRBG support in libcrypto.

in FIPS builds.

Set fips_thread_set properly.

to test a "stuck" DRBG.