https://bugzilla.novell.com/show_bug.cgi?id=784994 https://bugzilla.novell.com/show_bug.cgi?id=784994#c1 Petr Cerny changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|pcerny@suse.com |gjhe@suse.com --- Comment #1 from Petr Cerny 2012-10-15 13:50:11 UTC --- openssl rather than openssh issue -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=784994 https://bugzilla.novell.com/show_bug.cgi?id=784994#c3 --- Comment #3 from Guanjun He 2012-11-12 09:08:11 UTC --- please help to test the patch attached, thanks. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=784994 https://bugzilla.novell.com/show_bug.cgi?id=784994#c5 --- Comment #5 from Franz Wudy 2012-11-14 18:25:18 UTC --- BTW: The outputs from the original build: # openssl version -a OpenSSL 1.0.1c 10 May 2012 built on: 2012-05-10 19:31:27.000000000 +0000 platform: linux-x86_64 options: bn(64,64) rc4(8x,int) des(idx,cisc,16,int) blowfish(idx) compiler: gcc -fPIC -DOPENSSL_PIC -DZLIB -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -m64 -DL_ENDIAN -DTERMIO -O3 -Wall -fmessage-length=0 -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -g -std=gnu99 -Wa,--noexecstack -fomit-frame-pointer -DTERMIO -DPURIFY -DSSL_FORBID_ENULL -D_GNU_SOURCE -Wall -fstack-protector -Wa,--noexecstack -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM OPENSSLDIR: "/etc/ssl" openssl speed -evp aes-128-ecb -engine padlock invalid engine "padlock" 140484370863784:error:260B606D:engine routines:DYNAMIC_LOAD:init failed:eng_dyn.c:521: 140484370863784:error:2606A074:engine routines:ENGINE_by_id:no such engine:eng_list.c:417:id=padlock 140484370863784:error:25066067:DSO support routines:DLFCN_LOAD:could not load the shared library:dso_dlfcn.c:187:filename(libpadlock.so): libpadlock.so: cannot open shared object file: No such file or directory 140484370863784:error:25070067:DSO support routines:DSO_load:could not load the shared library:dso_lib.c:244: 140484370863784:error:260B6084:engine routines:DYNAMIC_LOAD:dso not found:eng_dyn.c:450: Doing aes-128-ecb for 3s on 16 size blocks: 8468331 aes-128-ecb's in 3.00s Doing aes-128-ecb for 3s on 64 size blocks: 2315304 aes-128-ecb's in 3.00s Doing aes-128-ecb for 3s on 256 size blocks: 588843 aes-128-ecb's in 3.00s Doing aes-128-ecb for 3s on 1024 size blocks: 148641 aes-128-ecb's in 2.99s Doing aes-128-ecb for 3s on 8192 size blocks: 18623 aes-128-ecb's in 3.00s OpenSSL 1.0.1c 10 May 2012 built on: 2012-05-10 19:31:27.000000000 +0000 options:bn(64,64) rc4(8x,int) des(idx,cisc,16,int) aes(partial) blowfish(idx) compiler: gcc -fPIC -DOPENSSL_PIC -DZLIB -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -m64 -DL_ENDIAN -DTERMIO -O3 -Wall -fmessage-length=0 -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -g -std=gnu99 -Wa,--noexecstack -fomit-frame-pointer -DTERMIO -DPURIFY -DSSL_FORBID_ENULL -D_GNU_SOURCE -Wall -fstack-protector -Wa,--noexecstack -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128-ecb 45164.43k 49393.15k 50247.94k 50905.81k 50853.21k Some of the compiler options are a little different. Also IDEA cipher is under the options list now. Franz -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=784994 https://bugzilla.novell.com/show_bug.cgi?id=784994#c7 --- Comment #7 from Franz Wudy 2012-11-15 14:35:08 UTC --- okay. I en-crypted the ogg manual pages file once using the "old" openssl and once using the "new" openssl. Then I de-crypted the files again. Then I created SHA1 hashes of the so treated files: $ ./sha1sum ogg* 77c0951aa2c0b4ea6dc2aabf7d0c538dc26f1ae3 ogg123 9f8655b24807f4ea36c04b33e73ba78a497ac008 ogg123_old_enc 77c0951aa2c0b4ea6dc2aabf7d0c538dc26f1ae3 ogg123_old_enc_dec 843f9dd825c1b7fabd1e4e2031fe397ba0fed3e1 ogg123_new_enc 77c0951aa2c0b4ea6dc2aabf7d0c538dc26f1ae3 ogg123_new_enc_dec ogg123 is the original file. ogg123_old_enc is the the file encrypted using the old openssl. ogg123_old_enc_dec is the again de-crypted files. As expected the hashes match. Same for files ogg123_new_enc and ogg123_new_enc_dec only using the new openssl. In this case hashes match, too. So as far as I am concerned the correctness is ensured. Let me know if you need more. Franz -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=784994 https://bugzilla.novell.com/show_bug.cgi?id=784994#c9 Benjamin Brunner changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED --- Comment #9 from Benjamin Brunner 2012-11-26 10:32:49 CET --- Update released for openSUSE 12.2. Resolved fixed. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=784994 https://bugzilla.novell.com/show_bug.cgi?id=784994#c11 --- Comment #11 from Swamp Workflow Management 2012-11-26 10:07:03 UTC --- openSUSE-RU-2012:1543-1: An update that has one recommended fix can now be installed. Category: recommended (low) Bug References: 784994 CVE References: Sources used: openSUSE 12.2 (src): openssl-1.0.1c-2.4.1 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=784994 https://bugzilla.novell.com/show_bug.cgi?id=784994#c13 --- Comment #13 from Swamp Workflow Management 2014-02-18 14:04:48 UTC --- openSUSE-RU-2014:0249-1: An update that solves four vulnerabilities and has 5 fixes is now available. Category: recommended (moderate) Bug References: 670526,720601,784994,793420,802184,803004,849377,856687,857203 CVE References: CVE-2011-0014,CVE-2012-4929,CVE-2013-6449,CVE-2013-6450 Sources used: openSUSE 11.4 (src): openssh-5.8p1-7.2, openssh-askpass-gnome-5.8p1-7.1, openssl-1.0.1e-53.1 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.