Re: 9GB libcrypto.a in openssl-1.0.1c

2012-07-29 Thread Zack Weinberg
On Sun, Jul 29, 2012 at 11:00 AM, Dennis Clarke dcla...@blastwave.org wrote: After a build of openssl-1.0.1c on Solaris 10 with the Sun Studio 12 compilers I was very surprised to see this : # ls -l libcrypto.a -rw-r--r-- 1 root root 9908820968 Jul 17 19:47 libcrypto.a It's not

Re: Make issue with openssl-1.0.0f and openssl-1.0.0j

2012-07-17 Thread Zack Weinberg
On Tue, Jul 17, 2012 at 11:18 AM, Barone, Philip pbar...@harris.com wrote: 2. Does the 11GB .a file contain multiple copies of each .o file, perhaps every version you ever compiled? (You can test this with the command $ ar -t libcrypto.a This does not appear to be the issue either Server1

Re: C standard, was RE: Custom free routine is invoked with NULL argument in openssl 1.0.1

2012-06-05 Thread Zack Weinberg
On 2012-06-04 8:10 PM, Dave Thompson wrote: From: owner-openssl-us...@openssl.org On Behalf Of Jakob Bohm Having no current access to the C89 standard or its drafts, I am relying on the experience that many C89 real world systems I have encountered did not tolerate free(NULL). In contrast all

Re: C standard, was RE: Custom free routine is invoked with NULL argument in openssl 1.0.1

2012-06-05 Thread Zack Weinberg
On Tue, Jun 5, 2012 at 4:35 AM, Jakob Bohm jb-open...@wisemo.com wrote: On 6/5/2012 6:19 AM, Zack Weinberg wrote: According to http://gcc.gnu.org/ml/gcc-patches/2011-03/msg00376.html the last widely-used platform that crashed on free(NULL) was SunOS 4, which stopped being a reasonable

Writing constant-time elliptic curve calculations against the low-level OpenSSL API

2012-06-04 Thread Zack Weinberg
I've got a project ( https://github.com/zackw/moeller-ref ) which does a bunch of elliptic curve operations against custom curves, using the OpenSSL and/or Crypto++ low-level APIs (two parallel implementations of the same asymmetric cryptosystem).  One function in each implementation performs

1.0.1-final release time frame

2011-10-28 Thread Zack Weinberg
Is there a time frame for the final release of openssl 1.0.1 yet? I need the GCM support, and I'd hate to have to ask people to install a snapshot in order to build my program. Thanks, zw __ OpenSSL Project