Re: Inconsistent behavior between FIPS and non-FIPS AES

2012-10-16 Thread AJ
phen Henson To: openssl-users@openssl.org Cc: Sent: Tuesday, October 16, 2012 11:35 AM Subject: Re: Inconsistent behavior between FIPS and non-FIPS AES On Tue, Oct 16, 2012, AJ wrote: > Any other comments on the actual issue here? > > I don't believe the inconsistency is the expected

Re: Inconsistent behavior between FIPS and non-FIPS AES

2012-10-16 Thread Dr. Stephen Henson
On Tue, Oct 16, 2012, AJ wrote: > Any other comments on the actual issue here? > > I don't believe the inconsistency is the expected way the API should work. > It's a bug. The fix was applied to non-validated versions of OpenSSL but was too late to be included in the last validation. Steve. --

Re: Inconsistent behavior between FIPS and non-FIPS AES

2012-10-16 Thread AJ
look at. -AJ - Original Message - From: Jeffrey Walton To: openssl-users@openssl.org Cc: Sent: Friday, October 12, 2012 6:44 PM Subject: Re: Inconsistent behavior between FIPS and non-FIPS AES Hi aunt.jomamma, You have ignored every return value. You should probably start by checking al

Re: Inconsistent behavior between FIPS and non-FIPS AES

2012-10-12 Thread AJ
- From: Jeffrey Walton To: openssl-users@openssl.org Cc: Sent: Friday, October 12, 2012 6:44 PM Subject: Re: Inconsistent behavior between FIPS and non-FIPS AES Hi aunt.jomamma, You have ignored every return value. You should probably start by checking all return values. If you check all

Re: Inconsistent behavior between FIPS and non-FIPS AES

2012-10-12 Thread Jeffrey Walton
Hi aunt.jomamma, You have ignored every return value. You should probably start by checking all return values. If you check all return values *and* assert all the checks, you will have self debugging code. I find self debugging code the best code of all, but I'm kind of lazy. > 2) Is there purpo