From: "Greaney, Kevin" <[EMAIL PROTECTED]>

Kevin.Greaney>  I have run into a problem with one of the OpenSSL Apps.
Kevin.Greaney>  When attempting to run the Speed App with the RSA4096 option,
Kevin.Greaney>  I ran into a PRNG not seeded error (see log below).  I have setup a 
Kevin.Greaney>  RANDFILE and it is pointed to be a system-wide logical.  I also setup 
Kevin.Greaney>  a .RND in my SYS$LOGIN directory and ran Speed from there.  
Kevin.Greaney>  Neither random file made a difference.

Hmm, odd, I'm pretty sure I've made those tests myself, successfully.
Just a question: how much garbage do you have in those "random" files?

(Honestly, one should port prngd to VMS, that would help a lot.  Given
time, I might do it...)

Kevin.Greaney>  The other thing that I can't explain is why when I just use
Kevin.Greaney>  $ OPENSSL SPEED or $ OPENSSL SPEED RSA, it does attempt
Kevin.Greaney>  the RSA4096 option.  I'm sure it is because the code is smarter
Kevin.Greaney>  than I am. ;-)

When you just say "openssl speed" or "openssl speed rsa", it will try
to do RSA with the sizes 512, 1024, 2048 and 4096.

Kevin.Greaney>  I am running this on a VMS machine, AlphaStation400,
Kevin.Greaney>  running VMS V7.2.  I am using OpenSSL 0.9.5A which was
Kevin.Greaney>  compiled with DEC C V6.2-008.  BSAFE is patched in, and it
Kevin.Greaney>  happens if the /POINTER_SIZE is equal to 32 bits or 64 bits.

Hmm, I've never tried it with BSAFE patched in.  I wasn't even aware
BSAFE exists for VMS...  I think I'll do my test without BSAFE...

-- 
Richard Levitte   \ Spannvägen 38, II \ [EMAIL PROTECTED]
Chairman@Stacken   \ S-168 35  BROMMA  \ T: +46-8-26 52 47
Redakteur@Stacken   \      SWEDEN       \ or +46-709-50 36 10
Procurator Odiosus Ex Infernis                -- [EMAIL PROTECTED]
Member of the OpenSSL development team: http://www.openssl.org/
Software Engineer, Celo Communications: http://www.celocom.com/

Unsolicited commercial email is subject to an archival fee of $400.
See <http://www.stacken.kth.se/~levitte/mail/> for more info.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to