private key extractipon from ecdsapriv.pem file

2012-12-13 Thread jeetendra gangele
Hi , I run the below two command and generated the private key for ecdsa sign . But i thinks its not the correct lenght that why my signature creation is failing. 1.openssl ecparam -out ec_key.pem -name secp224r1 -genkey 2. openssl req -newkey ec:ec_key.pem -x509 -nodes -days 365 -keyout ecdsapr

RE: Openssl default_ca values while using HSM - LunaCA3

2012-12-13 Thread simon charles
Hi Patrick , I did create the private key using sautil and tagged a label while creating it ( "root-ca" ). I am working with my Safenet representative but the documentation is lacking when it comes to integration with openssl command line. I figured - ask the openssl experts here. Any help

RE: openssl AES decrypt problem

2012-12-13 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of Hailei Hu >Sent: Thursday, 13 December, 2012 06:27 >Thanks to your reply. >The first solution: >"you can set the length parameter on the decrypt operation to be 16 which will >provide you with a result that is your original 10 bytes plus 6 bytes

RE: Need help in loading private key for ECDSA

2012-12-13 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Jeffrey Walton > Sent: Thursday, 13 December, 2012 16:31 > On Thu, Dec 13, 2012 at 12:34 AM, jeetendra gangele > wrote: > I have not really been following this thread, so please forgive my > dumb questions. > > Are you using a NIST curve? If

[PATCH] for openssl v102snap20121213 for WCE 420/WM5/WM6 target platform, to fix compilation issues, resubmitted

2012-12-13 Thread Pierre DELAAGE
e -#if !defined(OPENSSL_SYSNAME_WIN32) && !defined(NETWARE_CLIB) +#if !defined(OPENSSL_SYSNAME_WIN32) && !defined(OPENSSL_SYSNAME_WINCE) && !defined(NETWARE_CLIB) /* pdelaage 20121213 */ #include #endif #include diff -ur orig/apps/apps.h patch1/apps/apps.h --- or

Re: Help in loading EC_KEY

2012-12-13 Thread Jeffrey Walton
On Thu, Dec 13, 2012 at 4:04 AM, jeetendra gangele wrote: > HI, > > I am trying to sign the data using EC-DSA algorithm. > i have the private key to sign the data and I could load using > EC_KEY_set_private_key. > But when check the loaded key its failing with the error code below. > error:100B104

Re: Need help in loading private key for ECDSA

2012-12-13 Thread Jeffrey Walton
On Thu, Dec 13, 2012 at 12:34 AM, jeetendra gangele wrote: > Hi i tried to load private key into 224 curve for ecdsa and I am > getting below error. > > EC_KEY_check_key failed: > error:100B1043:lib(16):func(177):reason(67). > > Bleow is my fun to load key. > > Can anybody guide me? $ openssl errs

Re: NIST Special Publication 800-56A Compliance

2012-12-13 Thread John Corbin
Steve, Thank you very much for your response. > If you can get that lab to publish the details, please do :-) I will check. Thanks, John On Thu, Dec 13, 2012 at 7:53 AM, Steve Marquess < marqu...@opensslfoundation.com> wrote: > On 12/12/2012 06:17 PM, John Corbin wrote: > > Is there a document

Re: Openssl default_ca values while using HSM - LunaCA3

2012-12-13 Thread Patrick Patterson
Hello Simon, The correct way is to have a "key pointer" file that you can use 'sautil' to create. Your SafeNet representative should be able to point you in the right direction. Best Regards, Patrick. On 2012-12-13, at 1:40 PM, simon charles wrote: > > Dr. Stephen , > Thank you for your

RE: Openssl default_ca values while using HSM - LunaCA3

2012-12-13 Thread simon charles
/usr/local/openssl/ssl/bin/openssl version OpenSSL 1.0.0e 6 Sep 2011 - Simon Charles - > Date: Thu, 13 Dec 2012 19:53:40 +0100 > From: st...@openssl.org > To: openssl-users@openssl.org > Subject: Re: Openssl default_ca values while using HSM - LunaCA3 > > On Thu, Dec 13, 2012, simon charles

Re: Openssl default_ca values while using HSM - LunaCA3

2012-12-13 Thread Dr. Stephen Henson
On Thu, Dec 13, 2012, simon charles wrote: > > Dr. Stephen , > Thank you for your reply - here is the output of your recommended > command line > > /usr/local/openssl/ssl/bin/openssl ca -config CA.cnf -engine LunaCA3 > -keyfile "root-ca" -keyform ENGINE -in test-svr-010req.pem -out >

RE: Openssl default_ca values while using HSM - LunaCA3

2012-12-13 Thread simon charles
Dr. Stephen , Thank you for your reply - here is the output of your recommended command line /usr/local/openssl/ssl/bin/openssl ca -config CA.cnf -engine LunaCA3 -keyfile "root-ca" -keyform ENGINE -in test-svr-010req.pem -out test-svr-010.pem -batch Using configuration from CA.cnf engin

Re: loading public point

2012-12-13 Thread jeetendra gangele
Thanks for your reply. I just random value i have given. how did you calculate that ?. like for 224 curve point will be 56 byte long? what about private key for 224 it will be 28 byte long?. Ya i observed i am not able to calculate these test values thats why its failing. Can you give me any point

Re: NIST Special Publication 800-56A Compliance

2012-12-13 Thread Steve Marquess
On 12/12/2012 06:17 PM, John Corbin wrote: > Is there a document that lists the appropriate 800-56a standards the > OpenSSL FIPS module conforms to and for each applicable section listed in > the 800-56a standard as conforming, is there a listing for all statements > that are not "shall" (that is,

Re: genrsa question how secure is the random creation

2012-12-13 Thread Michael Sierchio
On Tue, Dec 11, 2012 at 8:06 PM, Michael Sierchio wrote: > - Select an interval near the desired size [ 2^1023 + 1^1022 + 1 , 2^1024 - 1 ] > - Sieve out composites divisible by small primes > - Select two probable primes such that (p - q) is reasonably large > (2^100 or so) to defeat the differ

Re: Regarding OpenSSL on metro app

2012-12-13 Thread jeetendra gangele
On 12 December 2012 13:07, Mamillapalli, Balachandra wrote: > · Does OpenSSL compatible with Windows 8 Metro App? 1.yes it requires perl software 2.no its not __ OpenSSL Project http://www.

Re: Openssl default_ca values while using HSM - LunaCA3

2012-12-13 Thread Dr. Stephen Henson
On Wed, Dec 12, 2012, simon charles wrote: > Sorry for the duplicate post - was not signed up with the forum and might > have missed a response to my question . Please resend your answers if you > have already replied to my query. > > > All , > What would the default_ca section look like wh

Openssl ca parameters while using HSM

2012-12-13 Thread simon charles
All , What would the default_ca section look like while using LunaCA3 HSM for storing CA private key. Openssl looks for certificate and private_key on disk - how do i make openssl ca routine aware of private keys on the HSM ( LunaCA3 ) Thanks. - Simon Charles -

Regarding OpenSSL on metro app

2012-12-13 Thread Mamillapalli, Balachandra
Hello, Currently I am trying to port one of our C++ application to metro app. Our source is dependent on OpenSSL library. Just like to know, * Does OpenSSL requires to install Perl software? * Does OpenSSL compatible with Windows 8 Metro App? Thanks.

OpenSSL openssl-fips-2.0.2 and private label

2012-12-13 Thread bhagyalekshmi r
Hi All, I had one question regarding usage of openssl-fips-2.0.2. I want to use openssl-fips-2.0.2 to get NIST compliance for some crypto functionality*.* I don't want to go for FIPS 140-2 certification/validation. Still can I use some parts of openssl-fips-2.0.2 module along with OpenSSL library

Re: Set up the protocol

2012-12-13 Thread Michel
Le 12/12/2012 20:12, Alex Chen a écrit : Another question is how to enforce the 'server' side preference of the cipher suite selection? Is it also part of the SSL_CTX_set_options() Isn't this what you are looking for ? : SSL_OP_CIPHER_SERVER_PREFERENCE in http://www.openssl.org/docs/ssl/SSL_CT