[openssl.org #3022] Binary curves broken in FIPS mode

2013-04-01 Thread Stephen Henson via RT
On Fri Mar 22 20:41:21 2013, fr...@baggins.org wrote: > Hello > > When using OpenSSL-1.0.1e-fips a call to PEM_write_bio_PrivateKey > silently fails and produces a corrupt pem file when using an > EVP_PKEY_EC key and a binary curve. The same function works fine when > not using a FIPS capable OpenS

Re: [openssl.org #3022] Binary curves broken in FIPS mode

2013-04-01 Thread Matt Caswell
Any thoughts on this issue? As things currently stand binary curves are pretty much unusable in a FIPS capable OpenSSL build. Thanks Matt On 22 March 2013 19:41, Matt Caswell via RT wrote: > Hello > > When using OpenSSL-1.0.1e-fips a call to PEM_write_bio_PrivateKey > silently fails and produ

[openssl.org #3022] Binary curves broken in FIPS mode

2013-03-22 Thread Matt Caswell via RT
Hello When using OpenSSL-1.0.1e-fips a call to PEM_write_bio_PrivateKey silently fails and produces a corrupt pem file when using an EVP_PKEY_EC key and a binary curve. The same function works fine when not using a FIPS capable OpenSSL. I suspect the same problem will affect any ASN.1 routines tha