Re: Basics concepts about openssl+rsa

2010-08-17 Thread Leandro Santiago
Thx. I'll read these documents. In my system the keys aren't generated in "instalation-time", but I have both the keys, private and public pre-generated. Actually in my system the password based encrypt system works fine, and it's part of a larger subsystem. So the rsa idea has sounded good for m

Re: Basics concepts about openssl+rsa

2010-08-17 Thread Wim Lewis
On Aug 17, 2010, at 3:19 PM, Wim Lewis wrote: > But for any real-world application, you'll want to do the standard business > of generating a session key, encrypting the message using conventional > symmetric encryption, and encrypting the session key with the public key. > Since that's a lot o

Re: Basics concepts about openssl+rsa

2010-08-17 Thread Wim Lewis
On Aug 17, 2010, at 12:37 PM, Leandro Santiago wrote: > It's really a basic doubt: How can I parse a file with the public key > to a struct which I can use to encrypt the string. Maybe just a > simple_example.c... :-) And also an example about decrypt using the > private key, of course :-) > > I'

Re: wrong ELF class: ELFCLASS32

2010-08-17 Thread Tim Hudson
On 17/08/2010 7:03 PM, BISHT, SEEMANT (SEEMANT) wrote: Can you please tell me how to compile openssl library in 64-bit type? As when compiling the openssl, and checking If it was a linux intel based setup if would be: ./Configure linux-x86_64 or ./Configure linux-generic64 However given you

dynamic locks don't get cleaned up

2010-08-17 Thread Jeff Saremi
I apologize if this shows up more than once. I've been having problems sending emails out, all day. First I encountered this with valgrind but then I decided to have openssl print the leaks and it was also confirmed. I have reduced my code to the following two lines. Prior to this if course init

Basics concepts about openssl+rsa

2010-08-17 Thread Leandro Santiago
Hello to all. I'm really new in openssl. In my application I will use openssl to encrpypt some password strings using rsa. I've generated the pair of keys with openssl command line and now I want to use this pair to crypt and encrypt these strings. It's really a basic doubt: How can I parse a fil

wrong ELF class: ELFCLASS32

2010-08-17 Thread BISHT, SEEMANT (SEEMANT)
Can you please tell me how to compile openssl library in 64-bit type? As when compiling the openssl, and checking GNM056 sde>file bio_ssl.o bio_ssl.o: ELF 32-bit MSB relocatable SPARC32PLUS Version 1, V8+ Required GNM056 sde> I need it to be in 64 bit as I need to link this library with my e

RE: Adobe Acrobat Certificates?

2010-08-17 Thread Steve Roylance
Sal, Jakob, The CP for Adobe is here:- http://www.adobe.com/misc/pdfs/Adobe_CDS_CP.pdf and section 7 highlights the specific profile of the certificate. Sal, you are correct it's an X509 certificate and there are no deviations from that spec. However, there are specific OID and specific rules

RE: Adobe Acrobat Certificates?

2010-08-17 Thread Steve Roylance
Hi Jacob, The best way to view what CDS is, is via the Adobe Website. It's a medium assurance hardware based identity credential that we, and others, supply. It's ultimately rooted through to the Adobe Root CA...ie. A root in all Adobe reader versions from Version 6 onwards. http://www.adobe.com/

Generating Session Keys

2010-08-17 Thread Sam Jantz
Hello all, I am trying to generate the session key from the pre-master-secret, and I cannot for the life of me figure out how to do this. Is there any way to do this easily, or is it completely dependent on the cipher spec? Alternatively if there is a way to access the session keys once the

RE: Cipher selection

2010-08-17 Thread Tim Cloud
The application calls openssl.exe, and does not use the libeay32.dll. Is there an "easy way" to compile the executable with only the "STRONG" cipher suite? Thanks. Timothy Cloud MSPRC Database Manager Chickasaw Nation Industries (405) 869-3358 (Office) (405) 568-9752 (Cell) -Original Mess

Re: MD2 capability

2010-08-17 Thread Dr. Stephen Henson
On Tue, Aug 17, 2010, kartik rustagi wrote: > Thanks for replying. Can you be more specific about which option to add in > ./configure in order to have md2 enabled? > If you are using OpenSSL 1.0.0 or later then enable-md2 will do the trick, this option has no effect on 0.9.8 which includes md2