Hi Jonathan,
Nice diagnosis, I'm just checking a few things in the source before I
comment, but in the mean-time could you please (for now) just split out
item (1) and create a ticket in the RT tracker system with it?
http://www.aet.tu-cottbus.de/rt2/
We'll deal with the other items in good time (and perhaps in separate
tickets), depending what comes out of (1).
* Jonathan Hersch ([EMAIL PROTECTED]) wrote:
> Hi,
>
> I'm signing and verifying documents using DSA and have run into a couple of
> problems.
>
> I'm working with OpenSSL 0.9.7 on Linux with a Broadcom crypto card based on
> the 5821 (so OpenSSL engine type is "ubsec"). I have version 1.81 of the
> Broadcom driver.
>
> (1) While testing I found that verification of certain signed documents crashed
> OpenSSL. The problem appears to be that hw_ubsec.c:ubsec_dsa_verify() calls
> p_UBSEC_dsa_verify_ioctl() and if this call fails then the code tries using
> software crypto, indirectly calling dsa_ossl.c:dsa_do_verify(). However,
> dsa_do_verify() tries to do:
>
> if (!ENGINE_get_DSA(dsa->engine)->dsa_mod_exp(dsa, &t1,dsa->g,&u1,
> dsa->pub_key,&u2,
> dsa->p,ctx,mont))
> goto err;
[snip]
Cheers,
Geoff
--
Geoff Thorpe
[EMAIL PROTECTED]
http://www.openssl.org/
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
