Same here, works great. Fantastic work, especially considering this was fixed over the weekend!
Ken --- On Mon, 8/8/11, Tyrel Haveman <[email protected]> wrote: > From: Tyrel Haveman <[email protected]> > Subject: Re: FIPS CCM self-test failure > To: [email protected] > Date: Monday, August 8, 2011, 11:33 AM > Thank you, Andy, this works great! > Also thanks for fixing it so quickly. > > Tyrel > > On Sun, Aug 7, 2011 at 11:02 AM, Andy Polyakov <[email protected]> > wrote: > >> The error happens in fips_aes_selftest.c, lines > 157-159: > >> > >> > >> if (memcmp(tag, ccm_tag, sizeof(ccm_tag)) > >> || memcmp(out, ccm_ct, > sizeof(ccm_ct))) > >> goto err; > > > > That's where the error *detected*, not occurs:-) The > problem is fixed > > now in http://cvs.openssl.org/chngview?cn=21213. > > > >>> From: Dr. Stephen Henson <[email protected]> > >>> > >>> Also temporarily in e_aes.c try changing the > line: > >>> > >>> #define AESNI_CAPABLE (1<<(57-32)) > >>> > >>> to: > >>> > >>> #define AESNI_CAPABLE 0 > >>> > >>> and see if you still get that error. > > > > For reference. Faster way (in sense that it doesn't > involve modifying > > code and recompilation) to disable AESNI is to > > > > env OPENSSL_ia32cap=~0x200000000000000 > test/fips_test_suite > > > > A. > > > ______________________________________________________________________ > > OpenSSL Project > http://www.openssl.org > > Development Mailing List > [email protected] > > Automated List Manager > [email protected] > > > ______________________________________________________________________ > OpenSSL Project > > http://www.openssl.org > Development Mailing List > [email protected] > Automated List Manager > > [email protected] > ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [email protected]
