RE: Difference b/w TLS Connection and TLS Session

2012-06-25 Thread Bernard46
Can I just double check that you are certain the Alert Level and Description bytes (1 byte each) are encrypted and so cannot be read in a Wireshark trace? This makes debugging very difficult if all you have to go on is a line trace? Dave Thompson-5 wrote: > >> From: owner-openssl-us...@openss

Error digest failure

2012-06-25 Thread Silvia
I have a program that verifies signature written using openssl-0.9.6. It works fine, but when I compile it with Openssl 1.0.1c, when I test it with the same token I have this error: PKCS7_signatureVerify:digest failure The digest that retrieves EVP_DigestFinal_ex is different in both versions

Re: Convert PKCS7_encrypt output to char*

2012-06-25 Thread Florian RĂ¼chel
Hi, A good idea might be to use the following sequence to create a base64 encoded output (safe to send over network): memorybio = BIO_new(BIO_s_mem()); base64bio = BIO_new(BIO_f_base64()); outbio = BIO_push(base64bio, memorybio); /* Copy PKCS#7 */ i2d_P

Convert PKCS7_encrypt output to char*

2012-06-25 Thread Mohammad Khodaei
Hello, I want to encrypt a small data using recipient public key and decrypt it on the receiver side using recipient private key. I chose "PKCS7_encrypt" and "PKCS7_decrypt" api to do so. Are they the correct functions? Is there any other alternative? Now my problem is that I want to convert the

Re: DH's speed

2012-06-25 Thread Jakob Bohm
Note that DH parameters (group parameters) can be safely shared among many users and connections, so they are not generated as often as the public and private keys. As for the exact time/speed, you can measure that yourself with your choice of computer, key size etc. On 6/25/2012 2:06 PM, Benama

DH's speed

2012-06-25 Thread Benamar Lydia
hello, please, what's speed of DH's operations (time nécessary to compute DH's parameters)? thank's!!!

Re: hardware device to sign CSR using openssl -e

2012-06-25 Thread Jakob Bohm
On 6/23/2012 7:51 AM, alexis _ wrote: From: jb-open...@wisemo.com I seem to recall there was/is an engine to use an device with a PKCS#11 ("p11") driver dll, on any OS. If this is so, you may be able to use many kinds of existing devices, including Gemalto or Oberthur smartcards (if those are saf

Results of AES_set_encrypt_key differing depending on compilation target

2012-06-25 Thread Robert Foss
Hi, I'm getting differing results from AES_set_encrypt_key() depending on which architecture I'm compiling for. As far as I understand it, key expansion is deterministic which would mean that something else is wrong. I've set up a simple printf aes key and compare with diff helper to easily ve