James Yonan wrote:
I have personally seen this behavior as well with the Padlock, though it
was last year (June or July) and I don't have model/stepping info. In my
case it was fixed by inserting sleep(0) calls immediately after OpenSSL
EVP crypto calls. So it appeared to be timing-related.
openvpn --test-crypto --secret key --cipher AES-128-CBC --verb 0 --engine padlock --tun-mtu 10000
Still no problems. What OpenSSL version do you use? There *could* be a
problem with forcing key reload from memory.
Rolf - try adding call to padlock_reload_key() to the end of
padlock_verify_context() in OpenSSL crypto/engine/hw_padlock.c file and
tell us if it helped.
What I did yesterday - triggered by a suggestion from centtech - was
this: I inserted a padlock_reload key at the end of both
padlock_aes_cipher_omnivorous and padlock_aes_cipher. This solves the
problem.