After building openssl 1.0.1c with the 2.0.2 fips module on Windows 7 with
Visual Studio 2008, the "ectest" fails as follows:
C:\openssl-1.0.1c>nmake -f ms\ntdll.mak test
ectest
Curve defined by Weierstrass equation
y^2 = x^3 + a*x + b (mod 0x17)
a = 0x1
b = 0x1
Point is not on curve: x = 0xD, y = 0xFFFFA41E
.\crypto\ec\ectest.c:318: ABORT
problems.....
I'm not sure where to go with it from here. Anyone have any suggestions on
what to check for or what to try next? Compiler switches? Could it be the
floating point accuracy? Note below in my build steps that I had to take some
fix-up steps to make it work. Is it related?
I'll keep plugging away but thought I'd ask in case someone else has some
expertise in this area.
Thanks in advance,
Lester
===============================================================================
BUILD STEPS:
FYI, Here are the steps I had to go through to build it with the FIPS module:
//Build the FIPS module
c:
cd openssl-fips-2.0.2
ms\do_fips no-asm
nmake -f ms\ntdll.mak test
//Note that the test fails with the following. ...and sure enough rsa_test.exe
didn't get created.:
C:\openssl-fips-2.0.2>nmake -f ms\ntdll.mak test
Microsoft (R) Program Maintenance Utility Version 9.00.30729.01
Copyright (C) Microsoft Corporation. All rights reserved.
cd out32dll
..\ms\test
rsa_test
'rsa_test' is not recognized as an internal or external command,
operable program or batch file.
problems.....
//I tried fips_test_suite.exe and it was successful. I guess I'll move on.
//***Fix Ups: These steps were needed to get openssl to compile with the fips
module so it would find files in the right place
//Note the file copy to include\openssl. Without this the include\openssl
files were zero bytes in size. Not sure why.
copy inc32\openssl include\openssl
md lib
copy out32dll lib
md bin
copy util bin
copy out32dll bin
//Build openssl WITHOUT the FIPS module, just to see if it works
c:
cd openssl-1.0.1c
perl Configure VC-WIN32 no-asm
ms\do_ms
nmake -f ms\ntdll.mak clean
nmake -f ms\ntdll.mak
nmake -f ms\ntdll.mak test
//Worked great! All tests pass!!!
//Build openssl WITH the FIPS now
c:
cd openssl-1.0.1c
perl Configure VC-WIN32 no-asm fips
--with-fipslibdir=C:\openssl-fips-2.0.2\out32dll
--with-fipsdir=C:\openssl-fips-2.0.2
ms\do_ms
nmake -f ms\ntdll.mak clean
nmake -f ms\ntdll.mak
nmake -f ms\ntdll.mak test
//test fails:
Curve defined by Weierstrass equation
y^2 = x^3 + a*x + b (mod 0x17)
a = 0x1
b = 0x1
Point is not on curve: x = 0xD, y = 0xFFFFA41E
.\crypto\ec\ectest.c:318: ABORT
problems.....
//zero byte header files here too! I had to copy from inc32\openssl
copy inc32\openssl include\openssl
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [email protected]
