since openssl release 0.9.8f the test suite of ipsec-tools test suite
fails in the Diffi-Hellman test which uses the openssl DH API.
The calculated shared secret does not match.
The problem appears only with some primes from the modular
exponential (modp) exponentional groups as specified in RFC3526:
On 32bit architectures the problem appears with a prime of length
3072 and 6144, on 64bit architectures with 6144 length.
I have attached a test code which does some elementary DH calculation
with the openssl API.
The test works fine with openssl pre 0.9.8f versions.
Any hints?
This is basically for reference. I've identified offending commit (it's
http://cvs.openssl.org/chngview?cn=16325) and will look into solution
later on. A.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List openssl-dev@openssl.org
Automated List Manager [EMAIL PROTECTED]
