On Tue, Dec 26, 2006, Victor B. Wagner wrote:

> I've encountered following problem yesterday our automated 
> tests for ccgost engine begin to fail on all x86 platforms, but work
> flawlessly on SPARC and AMD64. 
> 
> Result is same on half of dozen different linux distributions, which use
> various 3.x or 4.x versions of gcc and three FreeBSD (4.x, 5.x and 6.x) 
> and three Solaris x86 (8, 9 and 10).
> 
> If I manually recompile with -O2 instead of -O3, problem persists.
> If I recompile with no-asm, problem goes away.
> 
> Tests included in OpenSSL distrubution (invoked via make test)
> pass, so it seems that BIGNUM library as well as elliptic curve library
> should work. Probably this means that test suite is insufficient.
> 
> However produced signatures are not verified by either reference build
> and new build, and signatures, produced by reference known good build
> are not verified correctly.
> 
> Failing code - generation and verification of gost2001 signatures
> do not contain any special assembler code which can be affected with
> no-asm, but uses OpenSSL elliptic curve and bignum libraries
> extensively.
> 
> I haven't yet investigated recent commits which can be related with
> assembler code. 
> 
> May be somebody, more experienced with OpenSSL assembler code and GCC
> optimisation can give me some clue, where to search for problem?

Perhaps ccgost is using the BIGNUM library in a way that other routines don't
and that is triggering a problem. 

I'd try using 0.9.9 from an earlier date and see if you can find when the
problem first occurred possibly narrowing it down to which change triggered
this.

Say the earliest snapshot on openssl.dev then if that still fails an older
version using rsync/cvs.

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to