Build problem with FIPS-enabled 1.0.1i, Linux 32 and 64-bit

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

Build problem with FIPS-enabled 1.0.1i, Linux 32 and 64-bit

Porter, Andrew
The "make test" step for FIPS-enabled 1.0.1i is failing for me in the ectest (elliptic curves) section with:

SEC2 curve secp160r1 -- Generator:
     x = 0x4A96B5688EF573284664698968C38BB913CBFC82
     y = 0x23A628553168947D59DCC912042351377AC5FB32
verify degree ... ok
verify group order .... ok
long/negative scalar tests allowing precomputation ... ectest.c:261: ABORT

Fails on both 32-bit Linux hardware and 64-bit Linux VM, works when built non-FIPS.

The previous 1.0.1.h worked fine when built in early June with FIPS enabled.

Updated the local FIPS install from 2.0.5 to the latest 2.0.7, didn't help.

Andrew Porter


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [hidden email]
Automated List Manager                           [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: Build problem with FIPS-enabled 1.0.1i, Linux 32 and 64-bit

Dr. Stephen Henson
On Wed, Aug 06, 2014, Porter, Andrew wrote:

> The "make test" step for FIPS-enabled 1.0.1i is failing for me in the ectest (elliptic curves) section with:
>
> SEC2 curve secp160r1 -- Generator:
>      x = 0x4A96B5688EF573284664698968C38BB913CBFC82
>      y = 0x23A628553168947D59DCC912042351377AC5FB32
> verify degree ... ok
> verify group order .... ok
> long/negative scalar tests allowing precomputation ... ectest.c:261: ABORT
>
> Fails on both 32-bit Linux hardware and 64-bit Linux VM, works when built non-FIPS.
>
> The previous 1.0.1.h worked fine when built in early June with FIPS enabled.
>
> Updated the local FIPS install from 2.0.5 to the latest 2.0.7, didn't help.
>

This should fix it:

https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=1433cac53c93f9f109290389f60b17078a572d3d

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [hidden email]
Automated List Manager                           [hidden email]