> The error happens in fips_aes_selftest.c, lines 157-159:
> 
> 
> if (memcmp(tag, ccm_tag, sizeof(ccm_tag))
>         || memcmp(out, ccm_ct, sizeof(ccm_ct)))
>         goto err;

That's where the error *detected*, not occurs:-) The problem is fixed
now in http://cvs.openssl.org/chngview?cn=21213.

>> From: Dr. Stephen Henson <st...@openssl.org>
>>
>> Also temporarily in e_aes.c try changing the line:
>>
>> #define AESNI_CAPABLE   (1<<(57-32))
>>
>> to:
>>
>> #define AESNI_CAPABLE   0
>>
>> and see if you still get that error.

For reference. Faster way (in sense that it doesn't involve modifying
code and recompilation) to disable AESNI is to

        env OPENSSL_ia32cap=~0x200000000000000 test/fips_test_suite

A.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to