En fait j'ai envoy� le patch sur [EMAIL PROTECTED] lundi dernier, mais ne voyant pas de ticket j'ai re-post� sur openssl-dev.
Je dois vous avouer que je n'ai pas eu le temps d'�tudier le code de votre engine.
Cordialement, -- Fr�d�ric Giudicelli http://www.newpki.org
Frederic Donnat wrote:
Bonjour,
Je constate que vous avez pu resoudre le probleme! ;) J'espere que notre "engine" a pu vous aider. Belle analyse de votre part dans tous les cas! ;) Cependant cette restriction vient d'un probleme d'alignement 32bits du chip et donc driver, etc ... et je ne suis pas sur que votre patch reste valable sur platform 64bits (notamment avec les formata little et big endian)
Cordialement,
Donnat Frederic NetSecureOne http://www.netsecureone.com
-----Message d'origine-----
De : Fr�d�ric Giudicelli [mailto:[EMAIL PROTECTED] Envoy� : Wednesday, February 11, 2004 2:31 PM
� : [EMAIL PROTECTED]
Objet : Patch: cswift engine openssl-0.9.7c
Hi,
There is a problem with the cswift engine:
- in cswift_mod_exp_crt, it expects the length of "dmp1" and "dmq1" to be a multiple of 32, which is not always the case, the patch complements the datas with '\0' until the length is a multiple of 32.
- in cswift_rand_bytes, it expects "num" to be a multiple of 32, which is not always the case, the patch make sure le length passed to p_CSwift_SimpleRequest is always a multiple of 32, by optionnaly using an intermetiade buffer.
These problems have been notified to Rainbow, which has been able to reproduce the problem. The patch has been validated by their support service.
Regards,
______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
