On 06/29/2011 04:46 PM, Dr. Stephen Henson wrote:
> On Wed, Jun 29, 2011, Tyrel Haveman wrote:
>
>> Thanks Steve. This helps a lot. One more related question: Why are the
>> FIPS test vectors different for different platforms? It seems like
>> Windows and Linux, for example, should both be able to encrypt the
>> same things and produce the same outputs.
>>
> They are interchangable it's just that those are the testvectors produced by
> that particular platform during testing.
The formal testing process requires that a unique set of test vectors
(request files) be generated for each test platform ("operational
environment"). Once such a set is used for one platform and the
response files confirmed as correct it cannot be used again for any
formal testing. Presumably that is to keep the vendors (i.e. us) from
cheating by hard-coding the correct answers. By now we have encountered
quite a few of these test vector sets, but as they are interchangeable
there is no point in keeping more than a few representative samples.
-Steve M.
--
Steve Marquess
OpenSSL Software Foundation, Inc.
1829 Mount Ephraim Road
Adamstown, MD 21710
USA
+1 877-673-6775
marqu...@opensslfoundation.com
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List openssl-dev@openssl.org
Automated List Manager majord...@openssl.org
