There is still a "bug" in cmac_test.c, though disabled with #if defined(DES_WORKS) ...
The DES test vectors you are using are from the faulty "SP800-38B.pdf" which has been corrected by the NIST in "Updated_CMAC_Examples.pdf". Fortunately, your cmac_test.c will work well on the DES cases with the corrected vectors. Peter-Michael -- Peter-Michael Hager - HAGER-ELECTRONICS GmbH - Germany -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Stephen Henson via RT Sent: Wednesday, February 10, 2010 2:57 PM To: [email protected] Cc: [email protected] Subject: [openssl.org #2162] Updated CMAC, CCM, GCM code > [[email protected] - Thu Feb 04 12:08:40 2010]: > > CMAC we have test failures on several platforms - looks like a real bug but > I havn't had time to investigate in detail yet, again it could be the test > code or the implementation. > I've reimplemented CMAC now in HEAD. It passes all the test vectors and includes a MAC method so it can be used from the command line or replaced entirely with an ENGINE version. I haven't included code to parse the NIST CMAC test file format yet: I just hacked up a perl script to to it. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [email protected]
