RE: Creating AES Key for encryption in server side and share the key

2011-09-12 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Jakob Bohm > Sent: Monday, 12 September, 2011 03:52 > On 9/9/2011 10:13 PM, krishnamurthy santhanam wrote: > The normal way to do this is: > > 1. On the side running openssl, just let openssl handle the > entire process, > including any AES

Re: id-RSASSA-PSS question

2011-09-12 Thread Dr. Stephen Henson
On Mon, Sep 12, 2011, Stef Hoeben wrote: > Hi, > > we have an SOD (a CMS for e-passports and e-ID cards) file that we can read > out and verify nicely if the signature algo is RSA_PKCS1_PADDING. > > But if the algo is RSA_PKCS1_PSS_PADDING (see attached txt for an asn1 > dump), > the verificati

id-RSASSA-PSS question

2011-09-12 Thread Stef Hoeben
Hi, we have an SOD (a CMS for e-passports and e-ID cards) file that we can read out and verify nicely if the signature algo is RSA_PKCS1_PADDING. But if the algo is RSA_PKCS1_PSS_PADDING (see attached txt for an asn1 dump), the verification fails. Below is a part of the stack trace, it looks lik

Re: How to link user application with FIPS-2

2011-09-12 Thread Steve Marquess
On 09/12/2011 05:27 AM, Jiri Hladky wrote: > Hello, > > I would like to use CTR DRBG random number generator. It's part of > the FIPS-2. > > I have downloaded the CVS tree and found fips_rand.h which defines > functions I would like to use: > > FIPS_drbg_init > FIPS_drbg_instantiate > FIPS_drbg_gen

test vectors for CTR DRBG

2011-09-12 Thread Jiri Hladky
Hello, I'm looking for the test vectors for CTR DRBG random number generator. I got test vectors from http://csrc.nist.gov/groups/STM/cavp/documents/drbg/drbgtestvectors.zip which contains CTR_DRBG.rsp file. However, I'm looking for the following scenario which is not covered right now: [AES-

How to link user application with FIPS-2

2011-09-12 Thread Jiri Hladky
Hello, I would like to use CTR DRBG random number generator. It's part of the FIPS-2. I have downloaded the CVS tree and found fips_rand.h which defines functions I would like to use: FIPS_drbg_init FIPS_drbg_instantiate FIPS_drbg_generate FIPS_drbg_reseed However, I'm not able to link these fu

Re: Creating AES Key for encryption in server side and share the key

2011-09-12 Thread Jakob Bohm
On 9/9/2011 10:13 PM, krishnamurthy santhanam wrote: I am implementing SSL on server side to authenticate the client certificate(X.509) and also client will authenticate the servers certificate(X.509). Once the mutual authentication has completed server has to generate AES key for encryption