This is a discussion on Re: [openssl.org #1593] BN_nist_mod_384 gives wrong answers - Openssl ; > Please verify http://cvs.openssl.org/chngview?cn=16985 . A. Unfortunately this is still incorrect. Consider for example a = 0xffffffffffffffffffffffffffffffffffffffffffffffff ffffffffffffffff00000000ffffffffffffffffffffffff00 00000000000000000000000000000000000000000000000000 00000000000000000000. Then BN_nist_mod_384 yields 0xffffffffffffffff00000000000000000000000000000000 000000000000000000000000000000000000000000000000. But the correct value (e.g. obtained by BN_mod) is 0xffffffffffffffff00000000000000000000000000000000 000000000000000100000000ffffffffffffffff00000001. I was not able ...
> Please verify http://cvs.openssl.org/chngview?cn=16985. A.
Unfortunately this is still incorrect. Consider for example a =
0xffffffffffffffffffffffffffffffffffffffffffffffff ffffffffffffffff00000000ffffffffffffffffffffffff00 00000000000000000000000000000000000000000000000000 00000000000000000000.
Then BN_nist_mod_384 yields
0xffffffffffffffff00000000000000000000000000000000 000000000000000000000000000000000000000000000000.
But the correct value (e.g. obtained by BN_mod) is
0xffffffffffffffff00000000000000000000000000000000 000000000000000100000000ffffffffffffffff00000001.
I was not able to understand the treatment of the carry.
Harry Reimann
__________________________________________________ ____________________
OpenSSL Project http://www.openssl.org
Development Mailing List openssl-dev@openssl.org
Automated List Manager majordomo@openssl.org