In message <[EMAIL PROTECTED]> on Wed, 16 Mar 2005 14:32:03 -0800, Michael 
D'Errico <[EMAIL PROTECTED]> said:

mike-mlm> I read somewhere that it is a good idea to
mike-mlm> cryptographically hash your key material to
mike-mlm> generate a key, so I wrote a function to do
mike-mlm> that.  I'm not exactly sure I'm doing what
mike-mlm> they suggest, so if anyone cares to, can
mike-mlm> you check over my work and see if there are
mike-mlm> any weaknesses?  Thanks in advance.

I asumme this is key material generation for symmetric algorithms.
Usually, those are derived from a user-chosen password, so I find it
difficult to understand how your function would be used.  I wonder,
BTW, if you've noticed the function EVP_BytesToKey()?  Otherwise, you
might want to read PKCS#5, both version 1.5 and version 2.x.

Cheers,
Richard

-- 
Richard Levitte                         [EMAIL PROTECTED]
                                        http://richard.levitte.org/

"When I became a man I put away childish things, including
 the fear of childishness and the desire to be very grown up."
                                                -- C.S. Lewis
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to