Re: BIO_READ and BASE64 Decode

2005-10-18 Thread Rich Salz
> char *sBase64[21] // this variable contains the Base64 Encoded string That's not a char buffer. I don't know what you're trying to do, but your code doesn't make sense to me. Did you see the sample code I posted the other day? /r$ -- Rich Salz Chief Security Archit

Re: ECB, CBC, CFB, OFB, and when and where you would use them.

2005-10-18 Thread Victor Duchovni
On Tue, Oct 18, 2005 at 07:08:38PM -0400, Rich Salz wrote: > why not uses pgp > Indeed, but with any file-by-file encryption tool, one also needs to ask about the lifecycle of the plain-text pre-images and and working decrypted copies. It is very hard to not leak additional plain-text copies tha

RE: ECB, CBC, CFB, OFB, and when and where you would use them.

2005-10-18 Thread Rich Salz
why not uses pgp -- Rich Salz Chief Security Architect DataPower Technology http://www.datapower.com XS40 XML Security Gateway http://www.datapower.com/products/xs40.html __ OpenSSL Project

"Signature did not match the certificate request"

2005-10-18 Thread Rodrigo H . Vázquez Cañás
Hi!!! I'm running openssl-0.9.7e patched for ERACOM I'm getting the following error message: "Signature did not match the certificate request" when I excecute the following command: openssl x509 -req -in cli/test.certreq -CA ca/CA_cert.pem -engine ERACOM -CAkey ca/CA.keylink > cli/test_cert.pe

BIO_READ and BASE64 Decode

2005-10-18 Thread Adam Jones
I am trying to decode a base64 encoded string. There appears to be something wrong. The read tells me that I have read 21 which is correct, but my output buffer has nothing in it. Any suggestions on what is wrong with the code. Thanks in Advance!   int main {    char *sBase64[21]  // this

Re: ECB, CBC, CFB, OFB, and when and where you would use them.

2005-10-18 Thread David Gianndrea
Sorry Victor, Im not explaining it very well. Let me try again. What we need to do is to protect data from the point of view of ensuring that if the media it is on be that a hard drive, tape, or optical disk is encrypted. For our system that is best done by encrypting each file on a file by file

Re: ECB, CBC, CFB, OFB, and when and where you would use them.

2005-10-18 Thread Victor Duchovni
On Tue, Oct 18, 2005 at 11:09:51AM -0400, David Gianndrea wrote: > Ok that is good info. What about just doing file level encryption. > As an example you have a disk with a bunch of files, and it is > only those files you would want encrypted, and the issue is more > a confidentiality is required

ASN1_OCTET_STRING_it error

2005-10-18 Thread Dmitry Belyavsky
Greetings! I have a problem with my engine. It's unable to load it, the report is 22324:error:25066067:DSO support routines:DLFCN_LOAD:could not load the shared library:dso_dlfcn.c:162:filename(/usr/local/ssl-apache/lib/engines/libmyengine.so): /usr/local/ssl-apache/lib/engines/libmyengine.so: un

linking error

2005-10-18 Thread Todd Douty
I'm attempting to use OpenSSL to talk to an SSL server across campus. I obtained example OpenSSL client code written in C from http://www.rtfm.com/openssl-examples and modified this code slightly to fit my needs. ssl_stuff.o is my version of the file that one time included the "main" program

RE: ECB, CBC, CFB, OFB, and when and where you would use them.

2005-10-18 Thread David C. Partridge
Why not encrypt the file using PKCS#7 enveloped or signed and enveloped data. 3DES-CBC or AES for date encryption, key encryption using intended recipient public key, authentication using RSA singer public key? If you need non-expanding data encryption using symmetric cipher, look at EAS in CTR m

Re: ECB, CBC, CFB, OFB, and when and where you would use them.

2005-10-18 Thread David Gianndrea
Ok that is good info. What about just doing file level encryption. As an example you have a disk with a bunch of files, and it is only those files you would want encrypted, and the issue is more a confidentiality is required / media loss issue then a tamper issue? We are looking to use AES-256 fo

Re: ECB, CBC, CFB, OFB, and when and where you would use them.

2005-10-18 Thread Victor Duchovni
On Tue, Oct 18, 2005 at 10:40:21AM -0400, David Gianndrea wrote: > Sorry I forgot to state that it is to encrypt file data on storage > devices such as disks, and tapes. I agree with your statement of > appearance, but im trying to get the folks the resources that they > need to do it correctly. T

Re: ECB, CBC, CFB, OFB, and when and where you would use them.

2005-10-18 Thread David Gianndrea
Sorry I forgot to state that it is to encrypt file data on storage devices such as disks, and tapes. I agree with your statement of appearance, but im trying to get the folks the resources that they need to do it correctly. They are currently in the design, and spec phase of this, so now is the ti

Adding custom data to SSL certificates

2005-10-18 Thread Jernej Kos
Hi, is there a way to add custom data (fields?) to SSL certificates ? If so, where can i find more documentation about it ? Regards, Jernej Kos. -- Jernej Kos <[EMAIL PROTECTED]> Unimatrix One __ OpenSSL Project

Re: ECB, CBC, CFB, OFB, and when and where you would use them.

2005-10-18 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 18 Oct 2005 09:31:44 -0400, David Gianndrea <[EMAIL PROTECTED]> said: dgianndrea> I wonder if some one could point me to some high level dgianndrea> document that would describe where, and when you would use dgianndrea> ECB, CBC, CFB, OFB modes. I have some

Re: ECB, CBC, CFB, OFB, and when and where you would use them.

2005-10-18 Thread Victor Duchovni
On Tue, Oct 18, 2005 at 09:31:44AM -0400, David Gianndrea wrote: > I wonder if some one could point me to some high level document > that would describe where, and when you would use ECB, CBC, CFB, OFB > modes. I have some developers that are trying to include > encryption into some code, and ther

ECB, CBC, CFB, OFB, and when and where you would use them.

2005-10-18 Thread David Gianndrea
I wonder if some one could point me to some high level document that would describe where, and when you would use ECB, CBC, CFB, OFB modes. I have some developers that are trying to include encryption into some code, and there seems to be some confusion among them. -- David Gianndrea Senior Netw

How do I restart the same SSL session after calling SSL_shutdown()?

2005-10-18 Thread Ning Ke
Hi! II want to restart the same SSL session after calling SSL_shutdown(). I tried the following but it got stuck at SSL_connect(). I wonder if I can do either of the following on the client: 1) Call SSL_shutdown() but then reuse the same SSL object for a later SSL_connect(). or 2) Call SSL_shu