Re: unable to make build_tests for fipscanisteronly config
If I would just like to use the random number generation functionality from the open-ssl source code, is there a subset of the files that I can include from open-ssl. Thanks in advance Shruthi On Wed, Jun 20, 2012 at 5:33 AM, Shruthi rangan wrote: > Thanks it works now. > > > On Wed, Jun 20, 2012 at 2:51 AM, Dr. Stephen Henson wrote: > >> On Wed, Jun 20, 2012, Shruthi rangan wrote: >> >> > I am able to build the tests succesfully from the OpenSSL-fips-2_0-dev >> > branch. While validating the DRBG Validation list from NIST. I find all >> the >> > validations (*HASH_DRBG.txt, HMAC_DRGB.txt, **Dual_EC_DRBG.txt.* >> > )passing except *CTR_DRBG*: Below is the error message. >> > ./fips_drbgvs ../drbgtestvectors/CTR_DRBG.txt >> > ../drbgtestvectors/CTR_DRBG.rng >> > DRBG type not recognised! >> > Can you please help. >> > >> >> IIRC the NIST test vectors include tests for triple DES in CTR mode for >> the >> DRBG while OpenSSL only supports AES. So you'd need to edit those out >> from the >> test vectors. >> >> Steve. >> -- >> Dr Stephen N. Henson. OpenSSL project core developer. >> Commercial tech support now available see: http://www.openssl.org >> __ >> OpenSSL Project http://www.openssl.org >> Development Mailing List openssl-dev@openssl.org >> Automated List Manager majord...@openssl.org >> > >
Re: unable to make build_tests for fipscanisteronly config
Thanks it works now. On Wed, Jun 20, 2012 at 2:51 AM, Dr. Stephen Henson wrote: > On Wed, Jun 20, 2012, Shruthi rangan wrote: > > > I am able to build the tests succesfully from the OpenSSL-fips-2_0-dev > > branch. While validating the DRBG Validation list from NIST. I find all > the > > validations (*HASH_DRBG.txt, HMAC_DRGB.txt, **Dual_EC_DRBG.txt.* > > )passing except *CTR_DRBG*: Below is the error message. > > ./fips_drbgvs ../drbgtestvectors/CTR_DRBG.txt > > ../drbgtestvectors/CTR_DRBG.rng > > DRBG type not recognised! > > Can you please help. > > > > IIRC the NIST test vectors include tests for triple DES in CTR mode for the > DRBG while OpenSSL only supports AES. So you'd need to edit those out from > the > test vectors. > > Steve. > -- > Dr Stephen N. Henson. OpenSSL project core developer. > Commercial tech support now available see: http://www.openssl.org > __ > OpenSSL Project http://www.openssl.org > Development Mailing List openssl-dev@openssl.org > Automated List Manager majord...@openssl.org >
Re: unable to make build_tests for fipscanisteronly config
On Wed, Jun 20, 2012, Shruthi rangan wrote: > I am able to build the tests succesfully from the OpenSSL-fips-2_0-dev > branch. While validating the DRBG Validation list from NIST. I find all the > validations (*HASH_DRBG.txt, HMAC_DRGB.txt, **Dual_EC_DRBG.txt.* > )passing except *CTR_DRBG*: Below is the error message. > ./fips_drbgvs ../drbgtestvectors/CTR_DRBG.txt > ../drbgtestvectors/CTR_DRBG.rng > DRBG type not recognised! > Can you please help. > IIRC the NIST test vectors include tests for triple DES in CTR mode for the DRBG while OpenSSL only supports AES. So you'd need to edit those out from the test vectors. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org
Re: unable to make build_tests for fipscanisteronly config
I am able to build the tests succesfully from the OpenSSL-fips-2_0-dev branch. While validating the DRBG Validation list from NIST. I find all the validations (*HASH_DRBG.txt, HMAC_DRGB.txt, **Dual_EC_DRBG.txt.* )passing except *CTR_DRBG*: Below is the error message. ./fips_drbgvs ../drbgtestvectors/CTR_DRBG.txt ../drbgtestvectors/CTR_DRBG.rng DRBG type not recognised! Can you please help. Thanks Shruthi iDirect.net On Mon, Jun 18, 2012 at 9:21 PM, Shruthi rangan wrote: > > > -- Forwarded message -- > From: Dr. Stephen Henson > Date: Sat, Jun 16, 2012 at 6:50 AM > Subject: Re: unable to make build_tests for fipscanisteronly config > To: openssl-dev@openssl.org > > > On Sat, Jun 16, 2012, Shruthi rangan wrote: > > > Hi, > > I am working on "Red Hat Enterprise Linux Server release 5.6 (Tikanga)" > > and trying to validate the fips test cases for the latest code checked > out > > from the openssl cvs. The "make build_tests" fails with a linker error, > > can you please help me resolve. These are the steps tried. > > > > cvs -d anonym...@cvs.openssl.org:/openssl-cvs co openssl > > Don't use CVS HEAD use a fips snapshot instead, or if you must use CVS use > the > OpenSSL-fips-2_0-dev branch. > > Steve. > -- > Dr Stephen N. Henson. OpenSSL project core developer. > Commercial tech support now available see: http://www.openssl.org > __ > OpenSSL Project http://www.openssl.org > Development Mailing List openssl-dev@openssl.org > Automated List Manager majord...@openssl.org > >
Re: unable to make build_tests for fipscanisteronly config
On Sat, Jun 16, 2012, Shruthi rangan wrote: > Hi, > I am working on "Red Hat Enterprise Linux Server release 5.6 (Tikanga)" > and trying to validate the fips test cases for the latest code checked out > from the openssl cvs. The "make build_tests" fails with a linker error, > can you please help me resolve. These are the steps tried. > > cvs -d anonym...@cvs.openssl.org:/openssl-cvs co openssl Don't use CVS HEAD use a fips snapshot instead, or if you must use CVS use the OpenSSL-fips-2_0-dev branch. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org
