Re: Why is bf_cbc allowed in FIPS mode !

2011-06-10 Thread Dr. Stephen Henson
On Fri, Jun 10, 2011, anmajumd wrote: > The return value is 1 which is a success. > Hmmm... what does FIPS_mode() return just before that call? Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org _

Re: Why is bf_cbc allowed in FIPS mode !

2011-06-10 Thread anmajumd
The return value is 1 which is a success. Thanks Anamitra On 6/10/11 4:44 PM, "Dr. Stephen Henson" wrote: > On Fri, Jun 10, 2011, anmajumd wrote: > >> We are on version 0.9.8l of OpenSSL with FIPS module version 1.2 if that is >> what you are asking. >> > > Check the return value of EVP_Enc

Re: Why is bf_cbc allowed in FIPS mode !

2011-06-10 Thread Dr. Stephen Henson
On Fri, Jun 10, 2011, anmajumd wrote: > We are on version 0.9.8l of OpenSSL with FIPS module version 1.2 if that is > what you are asking. > Check the return value of EVP_EncryptInit(). Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: ht

Re: Why is bf_cbc allowed in FIPS mode !

2011-06-10 Thread anmajumd
We are on version 0.9.8l of OpenSSL with FIPS module version 1.2 if that is what you are asking. Thanks Anamitra On 6/10/11 4:37 PM, "Dr. Stephen Henson" wrote: > On Fri, Jun 10, 2011, anmajumd wrote: > >> >> We are preparing for a FIPS review with our lab. >> >> We have found that there i

Re: Why is bf_cbc allowed in FIPS mode !

2011-06-10 Thread Dr. Stephen Henson
On Fri, Jun 10, 2011, anmajumd wrote: > > We are preparing for a FIPS review with our lab. > > We have found that there is a piece of code that initializes the > encryption context for bf_cbc which works perfectly fine in FIPS mode. > > Specifically this is the code snippet I am referring to

Why is bf_cbc allowed in FIPS mode !

2011-06-10 Thread anmajumd
We are preparing for a FIPS review with our lab. We have found that there is a piece of code that initializes the encryption context for bf_cbc which works perfectly fine in FIPS mode. Specifically this is the code snippet I am referring to EVP_EncryptInit(ctx, EVP_bf_cbc(), key, iv); out

Re: Help with PKCS7 format

2011-06-10 Thread Dr. Stephen Henson
On Fri, Jun 10, 2011, Claudiu Stanciu wrote: > Hy. I am trying to encrypt a text into a pkcs7 format without using > PKCS7_encrypt, because i want to control the key used. So I have done almost > everything, but can't put the IV in the pkcs7 data. trying to obtain a PKCS7 > enveloped data with

Query about built-in tests

2011-06-10 Thread Samir Thaker
Hello there, I am learning openssl at the moment. I want to test openssl available on my system. Is there any documentation that I can refer to understand what the tests are doing? I also want to know what kind of these tests are and what do they cover? Thanks Samir

Help with PKCS7 format

2011-06-10 Thread Claudiu Stanciu
Hy. I am trying to encrypt a text into a pkcs7 format without using PKCS7_encrypt, because i want to control the key used. So I have done almost everything, but can't put the IV in the pkcs7 data. trying to obtain a PKCS7 enveloped data with aes_cbc_256 encryption. I can't understand where to p