Re: Fix VIA Padlock RNG support ?

2008-09-11 Thread Michal Ludvig
Hi Harald and Geoff, Harald Welte wrote: I searched the list archives but couldn't find anything apart from that single message by Michal to the list. He is talking about someobody having asked him to add testsuite support, but he didn't exactly know what he needs to add. I could not find any

Re: Memory leak : again and always

2008-09-11 Thread Darryl Miles
nicolas sitbon wrote: Hi, I'm currently developping an application using libcrypto, I find some memory leak with valgrind (please don't say me to compile with -DPURIFY, I know that and in fact, my problem is not uninitialized data, but rather memory leak) : ==26823== 1,552 (168 direct, 1,384

Re: Memory leak : again and always

2008-09-11 Thread nicolas sitbon
Sorry but Tim Hudson said me the answer previously, so now I know what's the problem. Thanks. 2008/9/11 Darryl Miles [EMAIL PROTECTED] nicolas sitbon wrote: Hi, I'm currently developping an application using libcrypto, I find some memory leak with valgrind (please don't say me to compile

Re: Fix VIA Padlock RNG support ?

2008-09-11 Thread Harald Welte
Michal, thanks so much for your detailed feedback. It is much appreciated. On Thu, Sep 11, 2008 at 10:22:38PM +1200, Michal Ludvig wrote: And finally the one you already knew about. That's the final works for me version ready to be committed to openssl tree current at that time (may not

Re: Fix VIA Padlock RNG support ?

2008-09-11 Thread Geoff Thorpe
On Thursday 11 September 2008 09:06:39 Harald Welte wrote: On Thu, Sep 11, 2008 at 10:22:38PM +1200, Michal Ludvig wrote: And finally the one you already knew about. That's the final works for me version ready to be committed to openssl tree current at that time (may not apply smoothly

Re: Fix VIA Padlock RNG support ?

2008-09-11 Thread Thor Lancelot Simon
On Thu, Sep 11, 2008 at 09:06:39PM +0800, Harald Welte wrote: Yes, after reviewing the discussion and documentation I tend to agree. So the best option really is to make OpenSSL use the userspace interface for the kernel random number generator, and feed that kernel RNG's entropy pool from

[openssl.org #1741] failed in testing BN_sqr openssl in aix 5.2 of 64 bit mode

2008-09-11 Thread Jack Rong via RT
Dear Sir/Madam, I am having problem to pass test, BN_sqr in AIX 5.2 for version openssl-0.9.7g. Message: test BN_sqr Square test failed! It is compiled with 64 mode in AIX 5.2. Here is the configuration: CONFIGURE_ARGS=aix-gcc -maix64 --prefix=/usr/local/ssl64

[openssl.org #1742] memory leak in open ssl

2008-09-11 Thread Krzysztof Nowak via RT
Hi, There is a memory leak - SSL_free() does not free memory allocated for tlsext_hostname. Best regards, Krzysztof Nowak (aka drNo) __ OpenSSL Project http://www.openssl.org Development

Re: [openssl.org #1736] Enhancement Request: do away with error in chil engine in absence of dynamic locks

2008-09-11 Thread Joe Orton
On Fri, Aug 29, 2008 at 08:45:12AM +0200, Sander Temme via RT wrote: 2) Have the engine provide its own callbacks that get set in case the application does not provide (presumably more suitable) alternatives: I think it would be entirely sensible for OpenSSL to offer a build-time

Re: [openssl.org #1736] Enhancement Request: do away with error in chil engine in absence of dynamic locks

2008-09-11 Thread [EMAIL PROTECTED] via RT
On Fri, Aug 29, 2008 at 08:45:12AM +0200, Sander Temme via RT wrote: 2) Have the engine provide its own callbacks that get set in case the application does not provide (presumably more suitable) alternatives: I think it would be entirely sensible for OpenSSL to offer a build-time

Re: [openssl.org #1736] Enhancement Request: do away with error in chil engine in absence of dynamic locks

2008-09-11 Thread Sander Temme
On Sep 11, 2008, at 7:04 AM, [EMAIL PROTECTED] via RT wrote: On Fri, Aug 29, 2008 at 08:45:12AM +0200, Sander Temme via RT wrote: 2) Have the engine provide its own callbacks that get set in case the application does not provide (presumably more suitable) alternatives: I think it would be

Re: [openssl.org #1736] Enhancement Request: do away with error in chil engine in absence of dynamic locks

2008-09-11 Thread Sander Temme via RT
On Sep 11, 2008, at 7:04 AM, [EMAIL PROTECTED] via RT wrote: On Fri, Aug 29, 2008 at 08:45:12AM +0200, Sander Temme via RT wrote: 2) Have the engine provide its own callbacks that get set in case the application does not provide (presumably more suitable) alternatives: I think it would be

Re: VIA Padlock Hashing Engine [Was: Fix VIA Padlock RNG support ?]

2008-09-11 Thread Andy Polyakov
I don't think there's any taboo or a strong opposition against the patch. It's just that Andy hasn't followed up, I sort of given up and moved to other projects and the whole thing has gone forgotten. Ok. I hope after my re-merge and testing we can get it integrated this time. BTW, my

Re: VIA Padlock Hashing Engine [Was: Fix VIA Padlock RNG support ?]

2008-09-11 Thread Geoff Thorpe
On Thursday 11 September 2008 15:16:48 Andy Polyakov wrote: BTW, my memory is vague here, is this Padlock block only able to do one-shot hashing? Yes, but a technique bypassing this limitation was proposed and proven to work (as per end of SHA1 thread mentioned earlier). Technique involved

Re: [openssl.org #1736] Enhancement Request: do away with error in chil engine in absence of dynamic locks

2008-09-11 Thread Peter Waltenberg
You need to be really careful here. Simply being dependent on pthreads and linking to non-threaded code is pure poison on some OS's. (HP/UX variants come to mind). If you do decide to add a default set of thread callbacks, you'll at least need a build configuration to disable it - I'm only

Re: [openssl.org #1736] Enhancement Request: do away with error in chil engine in absence of dynamic locks

2008-09-11 Thread Sander Temme via RT
Hi Peter, On Sep 11, 2008, at 2:48 PM, Peter Waltenberg wrote: You need to be really careful here. Simply being dependent on pthreads and linking to non-threaded code is pure poison on some OS's. (HP/UX variants come to mind). I agree. These are systems I personally have no exposure

Re: Fix VIA Padlock RNG support ?

2008-09-11 Thread Harald Welte
On Thu, Sep 11, 2008 at 09:32:14AM -0400, Geoff Thorpe wrote: I don't think there's any taboo or a strong opposition against the patch. It's just that Andy hasn't followed up, I sort of given up and moved to other projects and the whole thing has gone forgotten. Ok. I hope after my

Re: VIA Padlock Hashing Engine [Was: Fix VIA Padlock RNG support ?]

2008-09-11 Thread Michal Ludvig
BTW, my memory is vague here, is this Padlock block only able to do one-shot hashing? Yes, but a technique bypassing this limitation was proposed and proven to work (as per end of SHA1 thread mentioned earlier). Proof of concept is here: http://logix.cz/michal/devel/padlock/phe_sum.xp

Re: Fix VIA Padlock RNG support ?

2008-09-11 Thread Damien Miller
On Fri, 12 Sep 2008, Harald Welte wrote: On Thu, Sep 11, 2008 at 09:32:14AM -0400, Geoff Thorpe wrote: I don't think there's any taboo or a strong opposition against the patch. It's just that Andy hasn't followed up, I sort of given up and moved to other projects and the whole thing