> This is almost certainly a problem due to building openssl-0.9.2b
> with RSAref. The problem is that OAEP is a new RSA "encryption
> scheme" defined in RFC2347 dated October 1998. RSAref 2.0
> appears to date back to 1994.

Right. RSAREF does not support OAEP. Here's a patch to rsa_oaep_test
to keep it from complaining. (Also, the error should already have been
reported during encrytion; patch below.)

diff -u rsa_oaep_test.c~ rsa_oaep_test.c
--- rsa_oaep_test.c~    Thu Mar 25 02:59:27 1999
+++ rsa_oaep_test.c     Thu Mar 25 03:00:31 1999
@@ -195,6 +195,11 @@
     int clen = 0;
     int num;
 
+#ifdef RSAref
+    printf("No OAEP support.\n");
+    return 0;
+#endif
+
     plen = sizeof(ptext_ex) - 1;
 
     for (v = 0; v < 3; v++)

diff -u rsaref.c~ rsaref.c
--- rsaref.c~   Thu Mar 25 03:10:25 1999
+++ rsaref.c    Thu Mar 25 03:13:54 1999
@@ -328,6 +328,8 @@
        RSARandomState rnd;
        unsigned char buf[16];
 
+       if (padding == RSA_PKCS1_OAEP_PADDING) goto err;
+
        R_RandomInit(&rnd);
        R_GetRandomBytesNeeded((unsigned int *)&i,&rnd);
        while (i > 0)
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)  www.engelschall.com/sw/mod_ssl/
Official Support Mailing List               [EMAIL PROTECTED]
Automated List Manager                       [EMAIL PROTECTED]

Reply via email to