[openssl-dev] [openssl.org #3607] nistz256 is broken.

[Andy Polyakov via RT]

>> Attached. A little bit worse performance on some CPUs. I also took
>> opportunity to harmonize ecp_nistz256_from_mont by applying same pattern
>> for reduction. The patch is cumulative, i.e. is not incremental to
>> previously posted one[s], and addresses both problems, originally
>> reported one and discovered in the course. Patch to ecp_nistz256.c
>> referred above doesn't matter.
> 
> When applying just that patch, the original test case fails. Specially
> this test code (C++):
> 
> 
>   ...
> 
> 
> Just to check that I'm not doing anything stupid (which is always a
> distinct possibility), here are the .pl[1] and resulting .s[2] file
> that I ended up with.
> 
> [1] https://drive.google.com/file/d/0B_OzbbAp1CG5OVdVc196QmV3bG8/view?usp=sharing
> [2] https://drive.google.com/file/d/0B_OzbbAp1CG5Z3NoZzBqU09scFE/view?usp=sharing

Patching went wrong for you. As you seem to operate in 1.0.2 context
attached is corresponding ecp_nistz256.pl.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: ecp_nistz256-x86_64.pl
Type: text/x-perl
Size: 67673 bytes
Desc: not available
URL: <http://mta.opensslfoundation.net/pipermail/openssl-dev/attachments/20141210/b17a4c2d/attachment-0001.pl>