Re: Inconsistent behavior between FIPS and non-FIPS AES

2012-10-16 Thread AJ
phen Henson To: openssl-users@openssl.org Cc: Sent: Tuesday, October 16, 2012 11:35 AM Subject: Re: Inconsistent behavior between FIPS and non-FIPS AES On Tue, Oct 16, 2012, AJ wrote: > Any other comments on the actual issue here? > > I don't believe the inconsistency is the expected

Re: Inconsistent behavior between FIPS and non-FIPS AES

2012-10-16 Thread Dr. Stephen Henson
On Tue, Oct 16, 2012, AJ wrote: > Any other comments on the actual issue here? > > I don't believe the inconsistency is the expected way the API should work. > It's a bug. The fix was applied to non-validated versions of OpenSSL but was too late to be included in the last validation. Steve. --

Re: Inconsistent behavior between FIPS and non-FIPS AES

2012-10-16 Thread AJ
look at. -AJ - Original Message - From: Jeffrey Walton To: openssl-users@openssl.org Cc: Sent: Friday, October 12, 2012 6:44 PM Subject: Re: Inconsistent behavior between FIPS and non-FIPS AES Hi aunt.jomamma, You have ignored every return value. You should probably start by checking al

Re: Inconsistent behavior between FIPS and non-FIPS AES

2012-10-12 Thread AJ
- From: Jeffrey Walton To: openssl-users@openssl.org Cc: Sent: Friday, October 12, 2012 6:44 PM Subject: Re: Inconsistent behavior between FIPS and non-FIPS AES Hi aunt.jomamma, You have ignored every return value. You should probably start by checking all return values. If you check all

Re: Inconsistent behavior between FIPS and non-FIPS AES

2012-10-12 Thread Jeffrey Walton
Hi aunt.jomamma, You have ignored every return value. You should probably start by checking all return values. If you check all return values *and* assert all the checks, you will have self debugging code. I find self debugging code the best code of all, but I'm kind of lazy. > 2) Is there purpo

Inconsistent behavior between FIPS and non-FIPS AES

2012-10-12 Thread AJ
Hi, I've noticed an inconsistency between the behavior of AES_CTR in FIPS and non-FIPS modes. I am using openssl-1.0.1c and openssl-fips-2.0.  The following code demonstrates the issue:   1 #include   2 #include   3 #include "openssl/evp.h"   4    5 #define MSG_SIZE 14   6 const unsigned char