add fips pos cb for fail codes, generated hash