[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] Re: OpenSSL / OpenVPN / Padlock anomaly with small blocks of data.


  • Subject: Re: [Openvpn-users] Re: OpenSSL / OpenVPN / Padlock anomaly with small blocks of data.
  • From: Michal Ludvig <michal@xxxxxxxx>
  • Date: Thu, 07 Apr 2005 15:50:31 +1200

James Yonan wrote:

> I have personally seen this behavior as well with the Padlock, though it
> was last year (June or July) and I don't have model/stepping info.  In my
> case it was fixed by inserting sleep(0) calls immediately after OpenSSL
> EVP crypto calls.  So it appeared to be timing-related.
> 
> 
> openvpn --test-crypto --secret key --cipher AES-128-CBC --verb 0 --engine padlock --tun-mtu 10000

Still no problems. What OpenSSL version do you use? There *could* be a
problem with forcing key reload from memory.

Rolf - try adding call to padlock_reload_key() to the end of
padlock_verify_context() in OpenSSL crypto/engine/hw_padlock.c file and
tell us if it helped.

Michal Ludvig
-- 
* Personal homepage: http://www.logix.cz/michal