RE: trying to understand ECDHE operations

2009-09-30 Thread Michael D
Dave, Thank you for your kind help, I really appreciate it. I forgot to mention in my last email, which showed the results of the crash,..That it was running s_client. Thanks again, -Mike --- On Wed, 9/30/09, Dave Thompson wrote: > From: Dave Thompson > Subject: RE: trying to understand ECD

Second key in 3DES?

2009-09-30 Thread Joe Novak
Hi, I'm using the EVP_ set of function calls to interface to 2-key 3DES. I see how to set the first key in EVP_EncryptInit, but I do not see how to set the second key. Is it possible with the EVP_ calls or do I need to use the lower-level DES_ functions? Thanks. Joe

RE: FIPS

2009-09-30 Thread Vikram Arwade
After installing the patches mentioned for studio 11, tests started working. 1) 121015-07 2) 121017-20 Thanks, --Vikram -Original Message- From: Vikram Arwade Sent: Tuesday, September 29, 2009 5:05 PM To: openssl-users@openssl.org Subject: RE: FIPS Thanks Steve. Do you know why my ma

RE: trying to understand ECDHE operations

2009-09-30 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Michael D > Sent: Wednesday, 30 September, 2009 13:12 (superseding previous, I assume) > Ok, I reran my tests again...This time I added the > -named_curve parameter...and do indeed get 50 byte key for > the prime192v1 curve. > > However, if I

RE: Encrypting 32/64 bit integers

2009-09-30 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Brian Lavender > Sent: Wednesday, 30 September, 2009 03:28 > To: openssl-users@openssl.org > Subject: Re: Encrypting 32/64 bit integers > > On Fri, Sep 18, 2009 at 01:59:12PM -0700, musikit wrote: > > Encrypt(datato, datafrom) > > { > > EVP_Enc

Crash!! trying to understand ECDHE operations

2009-09-30 Thread Michael D
I don't mind digging in and trying to figure out why the crash.. but could somebody point me in the right direction? Thanks, Mike CONNECTED(0003) depth=0 /C=US/ST=Minnesota/L=Tonka/O=IWP/OU=t1/CN=Mike/emailaddress=m...@go.metrstate.edu verify error:num=18:self signed certificate verify retur

TXT_DB error number 2

2009-09-30 Thread Andreas Mattheiss
Hello, TXT_DB error number 2 is apparently still an issue, even in 1.0.0-beta3... I keep getting this when I try to renew an expired certificate: openssl ca -in newrec.pem -out gaga.pem On older documents I find the recommendation that unique_subject = no be used in the config file. I

RE: Simple handshake error with no explanation (C)

2009-09-30 Thread David Schwartz
Richard F. Ostrow Jr. wrote: > if((n = select(nfds + 1, &rfds, NULL, NULL, NULL)) > < 0) > { [snip] > for(sbiotmp = client_head; sbiotmp; sbiotmp = > sbiotmp->next) > { >

Re: Encrypting 32/64 bit integers

2009-09-30 Thread Michael S. Zick
On Wed September 30 2009, Victor Duchovni wrote: > On Wed, Sep 30, 2009 at 01:00:44PM -0500, Michael S. Zick wrote: > > > You might want to use some representation other than binary for your > > integers. There are a lot of ways to do that, perhaps pick something > > that will give you a reasonab

Re: Encrypting 32/64 bit integers

2009-09-30 Thread Victor Duchovni
On Wed, Sep 30, 2009 at 01:00:44PM -0500, Michael S. Zick wrote: > You might want to use some representation other than binary for your > integers. There are a lot of ways to do that, perhaps pick something > that will give you a reasonable (for cryptographic purposes) length. This has no impact

Re: Encrypting 32/64 bit integers

2009-09-30 Thread Michael S. Zick
On Wed September 30 2009, Kenneth Goldman wrote: > owner-openssl-us...@openssl.org wrote on 09/30/2009 03:27:56 AM: > > > On Fri, Sep 18, 2009 at 01:59:12PM -0700, musikit wrote: > > > > > > again works awesome for strings. however we are realizing there are > > > sometimes we just want a 32 bit i

Re: Encrypting 32/64 bit integers

2009-09-30 Thread Victor Duchovni
On Wed, Sep 30, 2009 at 12:27:56AM -0700, Brian Lavender wrote: > > please forgive me as i am not an OpenSSL or encryption expert. > > > > i am already using OpenSSL to do encryption of strings and it works awesome. > > i do have a question about encrypting smaller amounts of data though. Does t

Re: Encrypting 32/64 bit integers

2009-09-30 Thread Kenneth Goldman
owner-openssl-us...@openssl.org wrote on 09/30/2009 03:27:56 AM: > On Fri, Sep 18, 2009 at 01:59:12PM -0700, musikit wrote: > > > > again works awesome for strings. however we are realizing there are > > sometimes we just want a 32 bit int or a 64 bit int encrypted and nothing > > else. > > You co

RE: trying to understand ECDHE operations

2009-09-30 Thread Michael D
Ok, I reran my tests again...This time I added the -named_curve parameter...and do indeed get 50 byte key for the prime192v1 curve. However, if I run the server with my certificate and key, the client crashes processing the certificate. One more question. If the public key is in the certificate

Re: segmentation fault

2009-09-30 Thread Domenico Pucci
Controlla gli indirizzi di memoria relativi ai parametri della funzione ... On Wed, Sep 30, 2009 at 4:18 PM, marina russo wrote: > Hi! > I'm trying to run a client server application using openssl library,but > i've got some problems because, when i use the method: SSLv3_client_method() > i h

Re: segmentation fault

2009-09-30 Thread Richard F. Ostrow Jr.
Did you check that you actually support SSLv3_client_method()? On Wed, September 30, 2009 10:18 am, marina russo wrote: > > Hi! > I'm trying to run a client server application using openssl library,but > i've got some problems because, when i use the method: > SSLv3_client_method() i have a segment

segmentation fault

2009-09-30 Thread marina russo
Hi! I'm trying to run a client server application using openssl library,but i've got some problems because, when i use the method: SSLv3_client_method() i have a segmentation fault..what does it mean?which could be its causes? Thanks, Marina Russo _

Simple handshake error with no explanation (C)

2009-09-30 Thread Richard F. Ostrow Jr.
This has been driving me nuts for the past few weeks... I've written a simple app that demonstrates the problem I'm running into. Basically, a client connects to a server, they do the handshake, and all is well... or should be. Both machines are running linux. Below is the source, and below that is

Re: Encrypting 32/64 bit integers

2009-09-30 Thread Brian Lavender
On Fri, Sep 18, 2009 at 01:59:12PM -0700, musikit wrote: > > hello, > > please forgive me as i am not an OpenSSL or encryption expert. > > i am already using OpenSSL to do encryption of strings and it works awesome. > i do have a question about encrypting smaller amounts of data though. > > my

support for cavium NITROX XL CN1010-NHB-E card

2009-09-30 Thread Brian Lavender
Can OpenSSL tap into the Cavium Network's NITROX XL CN1010-NHB-E Acceleration Board for CentOS 5? I see that OpenSSL has the ENGINE_by_id and also the following references to hardware. It seems like something would have to be in the kernel to provide access to the hardware and the accelerator fun