I've finally gotten a rough draft design for the FIPS 140-2 work I'm doing for getting the Solaris Cryptographic Framework certified. It turns out we have to do some coding work, first, before we'll even be certifiable. I've tried to capture it all in the rough design, but I am new to the FIPS 140 world, so would love feedback from more experienced folks.
Another engineer will be joining me on the enhancements soon - yay!
If you're interested, design discussion is going on on the crypto-discuss at opensolaris . org alias.