[openssl.org #2045] [PATCH] Use Intel AES-NI automatically where available.

I'm a little confused about the way Intel AES-NI is supported in OpenSSL HEAD. This is just a feature of new CPUs, like SSE is. Yet SSE support is directly included in the normal assembly routines for x86, while AES-NI is implemented separately as an engine. Why is that? Are we slowly moving _all

RE: [Fwd: Re: [openssl.org #1998] [PATCH] SHA512 ROTR macro fix for PowerPC using LP32 model]

Hi Andy, I haven't witnessed any problems like you describe, so maybe the OS I am using is well behaved. Interestingly, I just looked at the assembly generated by switching to the generic ROTR definition: #define ROTR(x,s) (((x)>>s) | (x)<<(64-s)) I was surprised to see that the compiler

RE: [Fwd: Re: [openssl.org #1998] [PATCH] SHA512 ROTR macro fix for PowerPC using LP32 model]

Hi Andy, I haven't witnessed any problems like you describe, so maybe the OS I am using is well behaved. Interestingly, I just looked at the assembly generated by switching to the generic ROTR definition: #define ROTR(x,s) (((x)>>s) | (x)<<(64-s)) I was surprised to see that the compiler

Re: SSL_CTX

You may use an SSL_CTX object to create multiple sessions under multiple threads. Each session must have all of its I/O done in one thread (due to some rather nasty locking issues), but the SSL_CTX, once created and populated, is generally not updated -- which means that it's safe to perform read-

Re: interface stability

On 09/11/09 05:59 PM, Dr. Stephen Henson wrote: On Fri, Sep 11, 2009, Mark Phalan wrote: On 09/10/09 11:56 PM, Kurt Roeckx wrote: I understand this. I'd like to know if 0.9.8l will be ABI/API compat with 0.9.8k - or at least that it is considered a bug if they are not ABI/API compat. I'm unc

Re: A question about openssl command in FIPS mode

Dr. Stephen Henson wrote: On Fri, Sep 11, 2009, Lin Hwang wrote: Hi, I am an Openssl newby. Recently I am trying to build FIPS module and FIPS capable lib on a Linux system. I notice that all the fips_xxxtest programs at link time all go through fipsld and linked with a digest. I expect

SSL_CTX

Hello, -- Can we use single SSL_CTX object for multiple sessions at a time under multiple threads? -- Does SSL_connect() or SSL_set_fd() corrupts memory contents in any case? -- Can we call SSL_library_init() many times in a exe till it gets exited? Does it impact anything? I am using TLSv1. T