Great! Thank you, Werner.

The patches are now rebased on top of f7505b550dd591e33d3a3fab9277c43c460f1bad.

In addition to these a modified rsa generator is needed to be FIPS 186-4 compliant.

We ended up using this patch from Fedora:
http://pkgs.fedoraproject.org/cgit/libgcrypt.git/tree/libgcrypt-1.6.3-rsa-fips-keygen.patch

D253: 718_0011-Fix-testsuite-after-the-FIPS-adjustments.patch

D254: 717_0010-Add-new-pss-option-to-fipsdrv.patch

D255: 716_0009-Add-possibility-to-specify-salt-length-for-PSS-verif.patch

D256: 715_0008-fipsdrv-Add-support-for-RSA-keygen-tests.patch

D257: 714_0007-Fixes-for-RSA-testsuite-in-FIPS-mode.patch

D258: 713_0005-Use-2048-bit-RSA-keys-for-selftest.patch

D259: 712_0004-Disable-non-allowed-algorithms-in-FIPS-mode.patch

D260: 711_0003-PBKDF2-add-upper-bound-for-derived-key-length.patch

D261: 710_0002-ECDSA-adjustments-for-FIPS-186-4.patch

D262: 709_0001-DSA-adjustments-to-conform-with-FIPS-186-4.patch

Thank you, I'll send the DCO.
Also, I'll rebase the patches against current git master and adjust them to
conform with the doc/HACKING requirements.

D263: 517_0004-Make-rsa-FIPS-186-4-compliant.patch

D264: 516_0003-PBKDF-Add-the-omitted-step-from-pksc5v2.1-specificat.patch

D265: 515_0002-Make-ecdsa-FIPS-186-4-compliant.patch

D266: 514_0001-Make-dsa-FIPS-186-4-compliant.patch