When compiled with SSE2 optimizations (OPENSSL_IA32_SSE2), FIPS_mode_set fails on x86 CPUs without SSE or SSE2 support due to an explict check of bits 25 and 26 of OPENSSL_ia32cap. Is there a particular reason for this? I thought that all SSE2 optimizations were conditional on a runtime CPUID check via OPENSSL_ia32cap, so should work fine with or without SSE/SSE2 support. Why fail FIPS mode unconditionally?
Thanks, John ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [EMAIL PROTECTED]
