RE: AES-XTS problem in non-FIPS mode

2013-08-27 Thread Leon Brits
to:owner-openssl-...@openssl.org] > On Behalf Of Leon Brits > Sent: 27 August 2013 02:48 PM > To: openssl-dev@openssl.org > Subject: RE: AES-XTS problem in non-FIPS mode > > OK, sorry this stupid error has been resolved. There was some openssl init > code which got disabled when I d

RE: AES-XTS problem in non-FIPS mode

2013-08-27 Thread Leon Brits
LJB > -Original Message- > From: owner-openssl-...@openssl.org [mailto:owner-openssl-...@openssl.org] > On Behalf Of Leon Brits > Sent: 27 August 2013 12:08 PM > To: openssl-dev@openssl.org > Subject: RE: AES-XTS problem in non-FIPS mode > > Ok, some weirdness hap

RE: AES-XTS problem in non-FIPS mode

2013-08-27 Thread Leon Brits
son > Sent: 26 August 2013 03:23 PM > To: openssl-dev@openssl.org > Subject: Re: AES-XTS problem in non-FIPS mode > > On Mon, Aug 26, 2013, Leon Brits wrote: > > > I am using a FIPS compiled OpenSSL and I switch between FIPS and non- > FIPS mode with the FIPS_mode_set

Re: AES-XTS problem in non-FIPS mode

2013-08-26 Thread Dr. Stephen Henson
On Mon, Aug 26, 2013, Leon Brits wrote: > I am using a FIPS compiled OpenSSL and I switch between FIPS and non-FIPS > mode with the FIPS_mode_set() API call. The selection is made by the > application linked to my library based on its configuration. > That's weird. It should be using exactly t

RE: AES-XTS problem in non-FIPS mode

2013-08-26 Thread Leon Brits
sl.org [mailto:owner-openssl-...@openssl.org] > On Behalf Of Dr. Stephen Henson > Sent: 26 August 2013 01:26 PM > To: openssl-dev@openssl.org > Subject: Re: AES-XTS problem in non-FIPS mode > > On Mon, Aug 26, 2013, Leon Brits wrote: > > > Hi all, > > > > I've not

Re: AES-XTS problem in non-FIPS mode

2013-08-26 Thread Dr. Stephen Henson
On Mon, Aug 26, 2013, Leon Brits wrote: > Hi all, > > I've noticed in my unit tests that, for the same code path, when I encrypt an > decrypt the data read from a file which is 959120 bytes in size, then the > FIPS mode of AES-XTS works every time, while the non-FIPS mode fails some > times. I