Re: OpenSSL RAM usage

2009-09-29 Thread Nima Sharifimehr
You might want to check out MatrixSSL (http://www.matrixssl.org) which is a fairly successful attempt to provide a SSL implementation for embedded systems. --- On Tue, 9/29/09, Jose Stein wrote: From: Jose Stein Subject: OpenSSL RAM usage To: openssl-users@openssl.org Date: Tuesday, September

Re: OpenSSL RAM usage

2009-09-29 Thread Ger Hobbelt
It's been a while since I applies OpenSSL to a pure embedded environment, but it's quite doable. No RAM figures available now, but such are very application dependent anyway (how many connections are open at the same time; how many SSL contexts, etc.etc.); I find coding the functionality in a port

RE: FIPS

2009-09-29 Thread Vikram Arwade
Thanks Steve. Do you know why my make test must be failing? if [ -n "libcrypto" ]; then \ ../util/shlib_wrap.sh ./fips_shatest < SHAmix.req | diff -w SHAmix.fax - ; \ fi ERROR:2d072065:lib=45,func=114,reason=101:file=fips_rand_selftest.c:line =364: 1,129d0 < [L = 64] < < Len = 16 < Msg = 98a1 <

RE: trying to understand ECDHE operations

2009-09-29 Thread Michael D
Dave, Thank you very much for your efforts. I must be doing something incorrect, as today I tried to re-run what I had done before, and the Linux PC running the s_client crashes processing the certificate. I am running snapshot builds. If you don't mind me pestering a bit more, how did you run

Re: Geode on-chip AES 128-bit crypto accelerations but OpenSSL doesn't use it

2009-09-29 Thread Kyle Hamilton
On Tue, Sep 29, 2009 at 7:22 AM, Mark H. Wood wrote: > On Mon, Sep 28, 2009 at 01:54:57PM -0700, Kyle Hamilton wrote: >> OpenSSL uses the operating system to get entropy.  If AMD wants Linux >> to support its on-chip random number generator, it needs to write a >> driver that replaces /dev/random

OpenSSL RAM usage

2009-09-29 Thread Jose Stein
Hello, I am looking for benchmarks on OpenSSL RAM usage in embedded devices. Also trying to find ways to reduce it. Any pointers? I understand it should be an FAQ but does not seem to be in the list. Thanks, JLS

[Fwd: [opensc-user] using engine_pkcs11 programmatically]

2009-09-29 Thread John R Pierce
I had asked this on the opensc-users list, but realized its more of an openssl question. using the wclient2.c sample program [1] from this article [2] as a starting place http://www.linuxjournal.com/article/5487 http://www.rtfm.com/openssl-examples/openssl-examples-20020110.tar.gz I want to u

Re: Geode on-chip AES 128-bit crypto accelerations but OpenSSL doesn't use it

2009-09-29 Thread Mark H. Wood
On Mon, Sep 28, 2009 at 01:54:57PM -0700, Kyle Hamilton wrote: > OpenSSL uses the operating system to get entropy. If AMD wants Linux > to support its on-chip random number generator, it needs to write a > driver that replaces /dev/random and /dev/urandom. ...or feeds into them. Sufficient b

Re: Geode on-chip AES 128-bit crypto accelerations but OpenSSL doesn't use it

2009-09-29 Thread Alan Buxey
Hi, > Hi, > > Since we are on the subject of hardware enhanced cryptography, does the > HiFn chips used in the Soekris devices, have support in openssl?. yes - for some time now. i happen to have a vpn1401 next to me which I used in a FreeBSD box alan ___

Re: Geode on-chip AES 128-bit crypto accelerations but OpenSSL doesn't use it

2009-09-29 Thread Nigel Sollars
Hi, Since we are on the subject of hardware enhanced cryptography, does the HiFn chips used in the Soekris devices, have support in openssl?. Regards Nige Kyle Hamilton wrote: OpenSSL uses the operating system to get entropy. If AMD wants Linux to support its on-chip random number generator

Re: FIPS

2009-09-29 Thread Steve Marquess
Vikram Arwade wrote: ... Also is it OK to build using “perl Configure fipscanisterbuild solaris-sparcv9-cc” or do we need to use “./config fipscanisterbuild”? If we need to use “./config fipscanisterbuild” then how do we build on solaris sparcv9 using studio 11? Not if you're planning to