title: How to use DRBG from OpenSSL FIPS Object module v2.0
body: <p>I am trying to use the OpenSSL FIPS Object module v2.0 with the base OpenSSL library (1.0.1c) to make my application FIPS 140-2 complaint. The problem is I am not able to figure out how to use the DRBG API from the FIPS object module for replacing my RAND_* calls. </p>
  
  <p>I can see few instances of the RAND_bytes call made within OpenSSL modules and also use them in other libraries/source files (outside of OpenSSL). The user documentation provided in <a href="http://www.openssl.org/docs/fips/UserGuide-2.0.pdf" rel="nofollow">http://www.openssl.org/docs/fips/UserGuide-2.0.pdf</a> talks about the respective API but does not illustrate on which calls needs to be mapped to its respective RAND_* counterpart.</p>
  
  <p>I have tried looking for this information on various forums but not been lucky so far. I would appreciate it, if someone could help me understand how to use these calls and replace the RAND_* calls that are currently in use.</p>
  
  <p>Thanks,
  Sandeep</p>