Thank you, Andy, this works great! Also thanks for fixing it so quickly. Tyrel
On Sun, Aug 7, 2011 at 11:02 AM, Andy Polyakov <ap...@openssl.org> wrote: >> The error happens in fips_aes_selftest.c, lines 157-159: >> >> >> if (memcmp(tag, ccm_tag, sizeof(ccm_tag)) >> || memcmp(out, ccm_ct, sizeof(ccm_ct))) >> goto err; > > That's where the error *detected*, not occurs:-) The problem is fixed > now in http://cvs.openssl.org/chngview?cn=21213. > >>> From: Dr. Stephen Henson <st...@openssl.org> >>> >>> Also temporarily in e_aes.c try changing the line: >>> >>> #define AESNI_CAPABLE (1<<(57-32)) >>> >>> to: >>> >>> #define AESNI_CAPABLE 0 >>> >>> and see if you still get that error. > > For reference. Faster way (in sense that it doesn't involve modifying > code and recompilation) to disable AESNI is to > > env OPENSSL_ia32cap=~0x200000000000000 test/fips_test_suite > > A. > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > Development Mailing List openssl-dev@openssl.org > Automated List Manager majord...@openssl.org > ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org
