[MacPorts] #63857: PythonX: ripemd160 not supported with openssl3
MacPorts
noreply at macports.org
Mon Nov 8 23:20:57 UTC 2021
#63857: PythonX: ripemd160 not supported with openssl3
-------------------------------------------------+-------------------------
Reporter: cculianu | Owner: jmroot
Type: defect | Status: assigned
Priority: Normal | Milestone:
Component: ports | Version:
Resolution: | Keywords:
Port: python310 python39 python38 |
python37 python36 |
-------------------------------------------------+-------------------------
Comment (by mouse07410):
> Mouse, did you actually test to see if it had helped, adding 'enable-
rmd160' to the configure args ? As I had already tried that and it didn't
change anything.
Before leaving the machine running build, I tested that that's the option
for **enabling** RIPEMD160 that does not blow the config. Because, e.g.,
{{{enable-ripemd160}}} makes the config barf...
That option gets accepted by the configurator, and OpenSSL-3.1.0-dev gets
built successfully. And passes all the tests.
Now, the "pleasant" part: I concur - the darn thing just doesn't work!
(Note: I work with {{{master}}} - but the results here are the same as
yours.)
{{{
$ openssl3 speed ripemd160
Doing rmd160 for 3s on 16 size blocks: rmd160 error!
005EB70F01000000:error:0308010C:digital envelope
routines:inner_evp_generic_fetch:unsupported:crypto/evp/evp_fetch.c:349:Global
default library context, Algorithm (RIPEMD160 : 97), Properties ()
005EB70F01000000:error:03000086:digital envelope
routines:evp_md_init_internal:initialization
error:crypto/evp/digest.c:235:
version: 3.1.0-dev
built on: Mon Nov 8 22:40:20 2021 UTC
options: bn(64,64)
compiler: clang -fPIC -arch x86_64 -O3 -std=gnu18 -march=native -isysroot
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk
-g -DL_ENDIAN -DOPENSSL_PIC -D_REENTRANT -DOPENSSL_BUILDING_OPENSSL -DZLIB
-DZLIB_SHARED
CPUINFO: OPENSSL_ia32cap=0x7ffaf3bfffebffff:0x40000008029c67af
The 'numbers' are in 1000s of bytes per second processed.
type 16 bytes 64 bytes 256 bytes 1024 bytes 8192
bytes 16384 bytes
rmd160 0.00 0.00 0.00 0.00
0.00 0.00
$ openssl3 speed rmd160
Doing rmd160 for 3s on 16 size blocks: rmd160 error!
005EA61201000000:error:0308010C:digital envelope
routines:inner_evp_generic_fetch:unsupported:crypto/evp/evp_fetch.c:349:Global
default library context, Algorithm (RIPEMD160 : 97), Properties ()
005EA61201000000:error:03000086:digital envelope
routines:evp_md_init_internal:initialization
error:crypto/evp/digest.c:235:
version: 3.1.0-dev
built on: Mon Nov 8 22:40:20 2021 UTC
options: bn(64,64)
compiler: clang -fPIC -arch x86_64 -O3 -std=gnu18 -march=native -isysroot
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk
-g -DL_ENDIAN -DOPENSSL_PIC -D_REENTRANT -DOPENSSL_BUILDING_OPENSSL -DZLIB
-DZLIB_SHARED
CPUINFO: OPENSSL_ia32cap=0x7ffaf3bfffebffff:0x40000008029c67af
The 'numbers' are in 1000s of bytes per second processed.
type 16 bytes 64 bytes 256 bytes 1024 bytes 8192
bytes 16384 bytes
rmd160 0.00 0.00 0.00 0.00
0.00 0.00
$
}}}
So, the flag {{{enable-rmd160}}} **must** be present - however, it's
"necessary but insufficient". :-(
I filed the issue upstream:
https://github.com/openssl/openssl/issues/16994
And, adding {{{-provider legacy}}} to the **command line invocation**, I
see some improvements:
{{{
$ openssl3 speed -provider legacy rmd160
Doing rmd160 for 3s on 16 size blocks: 7105946 rmd160's in 3.00s
Doing rmd160 for 3s on 64 size blocks: 5105109 rmd160's in 2.99s
Doing rmd160 for 3s on 256 size blocks: 2798150 rmd160's in 3.00s
Doing rmd160 for 3s on 1024 size blocks: 998097 rmd160's in 3.00s
Doing rmd160 for 3s on 8192 size blocks: 131755 rmd160's in 2.96s
Doing rmd160 for 3s on 16384 size blocks: 70219 rmd160's in 2.99s
00BE861101000000:error:0308010C:digital envelope
routines:inner_evp_generic_fetch:unsupported:crypto/evp/evp_fetch.c:349:Global
default library context, Algorithm (CTR-DRBG : 0), Properties (<null>)
00BE861101000000:error:12000090:random number
generator:rand_new_drbg:unable to fetch drbg:crypto/rand/rand_lib.c:567:
$
}}}
--
Ticket URL: <https://trac.macports.org/ticket/63857#comment:31>
MacPorts <https://www.macports.org/>
Ports system for macOS
More information about the macports-tickets
mailing list