For what it's worth, here are all the functions with over 4Kb of stack usage (at least, the way I compiled/analyzed it) for OpenSSL-0.9.6c.
4108 PKCS7_decrypt 4124 SMIME_text 4236 PKCS7_verify 4252 PKCS12_pbe_crypt 4268 PKCS12_decrypt_d2i 4268 PKCS12_i2d_encrypt 4380 PKCS5_pbe2_set 4764 d2i_RSA_NET_2 4780 i2d_RSA_NET 5276 PEM_X509_INFO_write_bio 5308 PEM_do_header 5356 PEM_ASN1_write_bio 8192 des_read_pw_string 8204 probable_prime 10284 BIO_vprintf 16412 des_read_2passwords 16412 des_read_password For a multithreaded program, I consider 4Kb to be reasonable provided the call depth is not expected to be unusually large. 8Kb is reasonable so long as the function is shallow (not called from within the library except by a thin wrapper and doesn't call deeply into the library). More than 8kb is not reasonable, IMO. -- David Schwartz <[EMAIL PROTECTED]> ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]