Re: Inconsistent behavior between FIPS and non-FIPS AES

2012-10-16 Thread AJ
Steve, Thank you for the confirmation. It would be useful to put known issues & exceptions in the Users Guide, particularly for the FIPS validated versions, as they have such long cycles between when they will be revalidated. Thanks, -AJ - Original Message - From: Dr. Ste

Re: Inconsistent behavior between FIPS and non-FIPS AES

2012-10-16 Thread AJ
Any other comments on the actual issue here? I don't believe the inconsistency is the expected way the API should work. Thanks, -AJ - Original Message - From: AJ To: "openssl-users@openssl.org" Cc: Sent: Friday, October 12, 2012 7:14 PM Subject: Re: Inconsistent b

Re: Inconsistent behavior between FIPS and non-FIPS AES

2012-10-12 Thread AJ
Hi Jeff, Thanks for the response ... all the return values are 1, including setting the FIPS mode. I had removed the checks in this stripped down example code to get to my point and try to show the relevant portions, and minimize the code for someone to look at. -AJ - Original Message

Inconsistent behavior between FIPS and non-FIPS AES

2012-10-12 Thread AJ
s the cipher and key again in EVP_EncryptInit(), if I am only updating the IV?  (i.e. should I be able to put NULL for key and cipher). 2) Is there purposely a difference in behavior between the FIPS and non-FIPS versions, or is this a bug?  My understanding was that they *should* work int

Re: FIPS 2.0: fipsld on cross-compile

2012-07-22 Thread AJ
ut this great tool. And a big thanks for all of the quick responses and support. Regards, AJ - Original Message - From: Dr. Stephen Henson To: openssl-users@openssl.org Cc: Sent: Friday, July 20, 2012 4:22 PM Subject: Re: FIPS 2.0: fipsld on cross-compile On Fri, Jul 20, 2012, AJ

Re: FIPS 2.0: fipsld on cross-compile

2012-07-20 Thread AJ
why? - Original Message - From: Dr. Stephen Henson To: openssl-users@openssl.org Cc: Sent: Friday, July 20, 2012 1:35 PM Subject: Re: FIPS 2.0: fipsld on cross-compile On Fri, Jul 20, 2012, AJ wrote: > 1) I am cross-compiling a static FIPS enabled OpenSSL library for Andr

FIPS 2.0: fipsld on cross-compile

2012-07-20 Thread AJ
   If the fipsld script needs any modification, would this violate any FIPS validation? Thanks, AJ __ OpenSSL Project http://www.openssl.org User Support Mailing Listope

Re: FIPS: Incore fingerprint check fails on Android?

2012-07-19 Thread AJ
this point would seem to going back to static build, and getting fipsld working for the android build.  Unless I am missing something. Thanks, AJ - Original Message - From: Dr. Stephen Henson To: openssl-users@openssl.org Cc: Sent: Wednesday, July 18, 2012 6:55 PM Subject: Re: FIPS:

Re: FIPS: Incore fingerprint check fails on Android?

2012-07-18 Thread AJ
iple definition of `fips_rsa_padding_add_none' /usr/local/ssl/fips-2.0/lib//fipscanister.o:fips_canister.c:(.text+0x283f8): first defined here Any ideas?    Thanks, AJ - Original Message - From: Dr. Stephen Henson To: openssl-users@openssl.org Cc: Sent: Wednesday, July 18, 2012 4:15

Re: FIPS: Incore fingerprint check fails on Android?

2012-07-18 Thread AJ
I'm running on 4.0.4 and 2.3.4, with same results on both. - Original Message - From: Jeffrey Walton To: openssl-users@openssl.org Cc: Sent: Wednesday, July 18, 2012 2:27 PM Subject: Re: FIPS: Incore fingerprint check fails on Android? On Wed, Jul 18, 2012 at 11:15 AM, Aunt Jomamma w

Re: FIPS: Incore fingerprint check fails on Android?

2012-07-18 Thread AJ
Its my application producing the error. I've been reading more... perhaps I need to get Android build to link via fipsld to get the valid fingerprint? Does this sound right? Any tips? Thanks. "Dr. Stephen Henson" wrote: >On Wed, Jul 18, 2012, Aunt Jomamma wrote: > >> Sorry if this is duplica