OSSL_FIPS_MIN_SECURITY_STRENGTH_BITS
if (protect && strength < OSSL_FIPS_MIN_SECURITY_STRENGTH_BITS)
return (keylen * 8) >= OSSL_FIPS_MIN_SECURITY_STRENGTH_BITS;