phen Henson
To: openssl-users@openssl.org
Cc:
Sent: Tuesday, October 16, 2012 11:35 AM
Subject: Re: Inconsistent behavior between FIPS and non-FIPS AES
On Tue, Oct 16, 2012, AJ wrote:
> Any other comments on the actual issue here?
>
> I don't believe the inconsistency is the expected
On Tue, Oct 16, 2012, AJ wrote:
> Any other comments on the actual issue here?
>
> I don't believe the inconsistency is the expected way the API should work.
>
It's a bug. The fix was applied to non-validated versions of OpenSSL but was
too late to be included in the last validation.
Steve.
--
look at.
-AJ
- Original Message -
From: Jeffrey Walton
To: openssl-users@openssl.org
Cc:
Sent: Friday, October 12, 2012 6:44 PM
Subject: Re: Inconsistent behavior between FIPS and non-FIPS AES
Hi aunt.jomamma,
You have ignored every return value. You should probably start by
checking al
-
From: Jeffrey Walton
To: openssl-users@openssl.org
Cc:
Sent: Friday, October 12, 2012 6:44 PM
Subject: Re: Inconsistent behavior between FIPS and non-FIPS AES
Hi aunt.jomamma,
You have ignored every return value. You should probably start by
checking all return values.
If you check all
Hi aunt.jomamma,
You have ignored every return value. You should probably start by
checking all return values.
If you check all return values *and* assert all the checks, you will
have self debugging code. I find self debugging code the best code of
all, but I'm kind of lazy.
> 2) Is there purpo
Hi,
I've noticed an inconsistency between the behavior of AES_CTR in FIPS and
non-FIPS modes.
I am using openssl-1.0.1c and openssl-fips-2.0.
The following code demonstrates the issue:
1 #include
2 #include
3 #include "openssl/evp.h"
4
5 #define MSG_SIZE 14
6 const unsigned char