> The error happens in fips_aes_selftest.c, lines 157-159: > > > if (memcmp(tag, ccm_tag, sizeof(ccm_tag)) > || memcmp(out, ccm_ct, sizeof(ccm_ct))) > goto err;
That's where the error *detected*, not occurs:-) The problem is fixed now in http://cvs.openssl.org/chngview?cn=21213. >> From: Dr. Stephen Henson <[email protected]> >> >> Also temporarily in e_aes.c try changing the line: >> >> #define AESNI_CAPABLE (1<<(57-32)) >> >> to: >> >> #define AESNI_CAPABLE 0 >> >> and see if you still get that error. For reference. Faster way (in sense that it doesn't involve modifying code and recompilation) to disable AESNI is to env OPENSSL_ia32cap=~0x200000000000000 test/fips_test_suite A. ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [email protected]
