[openssl-users] FIPS test parse error?

[Steve Marquess]

On 07/15/2015 01:34 PM, Philip Bellino wrote:
> Hello,
> 
> We are testing our FIPS implementation which is based on openssl-1.0.2a
> and openssl-fips-2.0.9. 
> 
> We are executing tests on the target machine (which doesn't support
> running perl scripts so we cannot run fipsalgtest.pl)
> 
> that are included in the openssl-fips-2.0.9/fips directory, using
> request files
> 
> provided by a test/validation company.
> 
>  
> 
> All tests seem to run fine (no errors output to screen) except for an
> RSA2 KeyGen test, during which the following error text appears:
> 
>  
> 
> ./fips_rsagtest AlgCore/KeyGen_186-3.req /tmp/KeyGen_186-3.rsp
> 
> FATAL parse error processing line 16
> 
> FATAL RSAGTEST file processing error
> 
>  
> 
> Any help would be most appreciated.

The most likely cause is defective test vectors; that's quite common and
understandable given the labor intensive nature of the CAVS tool.

You could test your setup by processing one of the test vector sets used
for recent #1747 platform testing, for instance:


http://openssl.com/testing/validation-2.0/testvectors/OSF_2859_OE36.results.tar.gz

...which is the most recent officially confirmed one, from last week.

Note the the format of the test vectors changes over time, so older test
vectors are of limited value. The name your test lab gave that request
file could be a clue too; compare your request file against the known
good one above.

Also note that if you're trying for a new validation (which is the only
reason I can think of for attempting to do algorithm tests) you're in
for a painful surprise; some non-trivial code hacking will be necessary
to meet new requirements imposed since the #1747 validation was obtained.

-Steve M.

-- 
Steve Marquess
OpenSSL Software Foundation, Inc.
1829 Mount Ephraim Road
Adamstown, MD  21710
USA
+1 877 673 6775 s/b
+1 301 874 2571 direct
marquess at opensslfoundation.com
marquess at openssl.com
gpg/pgp key: http://openssl.com/docs/0x6D1892F5.asc