> You're using a different API so it's not comparable. With the EVP API, is it > possible the code's missing a call to EVP_MD_CTX_destroy in the > destructor? I see EVP_MD_CTX_cleanup but not destroy.
Never mind, I see the docs imply the finalize call is supposed to do that internally. I suspect it's a problem in how the EVP calls are made or perhaps you're doing something unusual that prevents it from cleaning up. -- Scott