Re: AES Key Wrap in FIPS Mode

2014-05-21 Thread Rahul Godbole
AES wrap/unwrap APIs look absent in FIPS mode. You might need to code the AES wrap algo using EVP AES wrappers for FIPS mode operation. I asked about the same more than an year back. http://openssl.6102.n7.nabble.com/AES-wrap-APIs-in-FIPS-mode-td44945.html On Thu, May 22, 2014 at 12:05 PM, R

Re: AES Key Wrap in FIPS Mode

2014-05-21 Thread Rahul Godbole
Raghav, Check openssl/evp.h. Check the man page of EVP_EncryptInit() This is the corresponding EVP API int EVP_EncryptInit(EVP_CIPHER_CTX *ctx,const EVP_CIPHER *cipher, const unsigned char *key, const unsigned char *iv); int EVP_EncryptInit_ex(EVP_CIPHER_CTX *ctx,const EV

AES Key Wrap in FIPS Mode

2014-05-21 Thread Raghav Varadan
Hi, I'm using Openssl FIPS in my application. The application does some AES Key Wrap/Unwrap and uses function calls to AES_set_encrypt_key()/AES_wrap_key()/AES_unwrap_key(). But in FIPS mode call to these low-level crypto function calls are forbidden. I would like to know if there is an EVP* inter

Verify that certificate does not change, in the verify_callback

2014-05-21 Thread Dimitrios Apostolou
Hello list, I'm using SSL_CTX_set_cert_verify_callback(empty_callback) to bypass all certificate chain walking and validation. I extract and validate the RSA key *after* handshake and verify only that. However I believe this callback can be called arbitrary times after initial handshake, in

Fwd: Hello, some dev question

2014-05-21 Thread alpha_one_x86
-- alpha_one_x86 Main developer of Ultracopier, Esourcing and server management IT, OS, technologies, security and business department --- Begin Message --- Hello, I have some question: http://h71000.www7.hp.com/doc/83final/ba554_90007/ch04s03.html What part is global, what part need be do by c