There is still a "bug" in cmac_test.c, though disabled with #if defined(DES_WORKS) ...
The DES test vectors you are using are from the faulty "SP800-38B.pdf" which has been corrected by the NIST in "Updated_CMAC_Examples.pdf". Fortunately, your cmac_test.c will work well on the DES cases with the corrected vectors. Peter-Michael -- Peter-Michael Hager - HAGER-ELECTRONICS GmbH - Germany -----Original Message----- From: owner-openssl-...@openssl.org [mailto:owner-openssl-...@openssl.org] On Behalf Of Stephen Henson via RT Sent: Wednesday, February 10, 2010 2:57 PM To: pwal...@au1.ibm.com Cc: openssl-dev@openssl.org Subject: [openssl.org #2162] Updated CMAC, CCM, GCM code > [pwal...@au1.ibm.com - Thu Feb 04 12:08:40 2010]: > > CMAC we have test failures on several platforms - looks like a real bug but > I havn't had time to investigate in detail yet, again it could be the test > code or the implementation. > I've reimplemented CMAC now in HEAD. It passes all the test vectors and includes a MAC method so it can be used from the command line or replaced entirely with an ENGINE version. I haven't included code to parse the NIST CMAC test file format yet: I just hacked up a perl script to to it. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org
