<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thanks. I'll pull those changes and test. I'll post the results to this mailing list.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Dominque</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Rob Austein <sra@hactrn.net><br>
<b>Sent:</b> Friday, March 8, 2019 7:44 PM<br>
<b>To:</b> Dominique Douglas<br>
<b>Cc:</b> tech@cryptech.is<br>
<b>Subject:</b> Re: [Cryptech Tech] CrypTech parallel-signatures.py</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">On Fri, 08 Mar 2019 16:41:49 -0500, Dominique Douglas wrote:<br>
> <br>
> I've been running performance test using a single alpha. To do this,<br>
> I've been using the parallel-signatures.py script that's in<br>
> libhal. It works well with one or two clients for 1024 and 2048 bit<br>
> RSA keys. However, it crashes whenever I try to use 3+ clients. This<br>
> includes the default 4 clients. Libhal is returning<br>
> HAL_ERROR_ASN1_PARSE_FAILED. The failure is being returned from<br>
> RPC_FUNC_PKEY_SIGN.<br>
<br>
That's almost certainly the mkmif driver bug Paul mentioned having<br>
fixed recently when we were all in Amsterdam a few weeks ago.<br>
<br>
It's "obviously" a locking problem, because it's affected by the<br>
number of (pseudo) threads running. That driver bug (since corrected)<br>
causes mkmif to return garbage under load instead of the MKM KEK<br>
value; unwrapping anything with garbage returns garbage, and garbage<br>
fails to parse as valid PKCS #8, so this shows up as an ASN.1 error.<br>
<br>
===<br>
<br>
In which context, and it being a Friday evening, I feel compelled to<br>
share the following (totally off-topic) tale from days of yore.<br>
<br>
Date: Fri, 16 Dec 1994 23:43:33 -0500<br>
From: Alan Bawden <Alan@epilogue.com><br>
Cc: Unix-Haters@mc.lcs.mit.edu<br>
Subject: passwd -l<br>
<br>
From: Rob Austein <sra@epilogue.com><br>
Date: Fri, 16 Dec 94 17:56:44 -0500<br>
<br>
Date: Fri, 16 Dec 1994 17:39:46 -0500<br>
From: Alan Bawden <Alan@epilogue.com><br>
...<br>
it says "passwd: connect: Connection refused".<br>
It would be nice to be able to set my passwd, what's going on here?<br>
<br>
Kerberos gets its fingers into the password changing stuff. The way<br>
to change a password just on the local machine is "passwd -l".<br>
<br>
Oh, of course, I should have guessed. "Connection refused". What else<br>
could it mean? Obviously this means that Kerberos wants me to give the<br>
"-l" argument to the "passwd" command. What could be more plain? Silly<br>
me. Unix really isn't all that hard if only people would learn to -read-<br>
the error messages.<br>
<br>
It's perfectly straightforward -- "Connection refused" clearly means that<br>
something -bad- happened (that's why the error message uses the negative<br>
word "refused"), and it has something to do with -networks- (because the<br>
error message uses the word "connection"). Put this together with the fact<br>
that I was trying to change my password (-security-), and what do you get?<br>
Let's see... "Bad" + "Network" + "Security"... Bad Network Security...<br>
Hmm... Baaad Network Security. Bad. Bad dog! Bad! (Grrrrr.) Down boy.<br>
(Grrr!!) Down! BAD! No! (GGRRRRAWWGGGRRRRRR!) Down! Bad dog! Stop<br>
that! Eaiiii!... Right! Kerberos! The Network Security Dog From Hell!<br>
What else could it be? The error message couldn't have been clearer.<br>
<br>
Sorry for bothering you.<br>
</div>
</span></font></div>
</body>
</html>