Update on this. Here is the log from my app. Any idea why my calculated sig is 000000000...?
2016-08-03 11:47:49.988 App[32127:2253410] FIPS_mode_set failed: 755413103 2016-08-03 11:47:49.988 App[32127:2253410] Embedded sig: 7363808352b3d84a797c91df813afcb58bf924b4 2016-08-03 11:47:49.988 App[32127:2253410] Calculated sig: 0000000000000000000000000000000000000000 Here is my code inside of my main.m files for my ios app int mode = FIPS_mode(), ret = 0; unsigned long err = 0; if(mode == 0) { ret = FIPS_mode_set(1 /*on*/); err = ERR_get_error(); } else { ret = FIPS_mode_set(0 /*off*/); err = ERR_get_error(); } if(1 != ret) NSLog(@"FIPS_mode_set failed: %lu", err); NSMutableString* f1 = [NSMutableString stringWithCapacity:MAGIC_20*2 + 8]; for(unsigned int i = 0; i < MAGIC_20; i++) [f1 appendFormat:@"%02x", FIPS_signature[i]]; NSLog(@"Embedded sig: %@", f1); unsigned char calculated[20] = {}; unsigned int ret2 = FIPS_incore_fingerprint(calculated, sizeof(calculated)); if(ret2 != MAGIC_20) { // Failure - wipe it. // Default is 0x00. We use 0xFF to differentiate memset(calculated, 0xFF, sizeof(calculated)); } NSMutableString* f2 = [NSMutableString stringWithCapacity:MAGIC_20*2 + 8]; for(unsigned int j = 0; j < MAGIC_20; j++) [f2 appendFormat:@"%02x", calculated[j]]; NSLog(@"Calculated sig: %@", f2); On Wed, Aug 3, 2016 at 10:39 AM, Brian Jost <br...@virtru.com> wrote: > I modified a script to get a FIPS compliant iOS library and am having > issues with the fingerprint. I had to add a CPU adjustment to the > incore_macho but I wouldn't think that would cause a FIPS fingerprint > mismatch. > > https://gist.github.com/jostster/ebbc6925c668b632d8b185293080256c > > Does anyone have any thoughts how to overcome this error so that I can > have a FIPS compliant iOS library for armv7, armv7s and arm64? >
-- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users