[openssl-users] Seeking to understand difference in RSA key gen between X9.31 and FIPS 186-4

Hey Openssl-User's, I'm trying to understand the difference between how primes are generated in RSA X9.31 ANSI standards ( which I don't have access to ) and FIPS 186-4 ( found here: http://csrc.nist.gov/groups/STM/cavp/documents/dss2/rsa2vs.pdf ) In the code at crypto/bn/bn_x931p.c::BN_X931_gene

[openssl-users] Some policy changes: RT retiring; use GitHub

A new blog post gives more details: https://www.openssl.org/blog/blog/2016/10/12/f2f-rt-github/ Effective immediately, RT is being retired, please create GitHub issues instead. The website has been update; the README and CONTRIBUTING files in each release branch will be done soon. There

Re: [openssl-users] Building an application with OpenSSL and FIPS support.

I recompiled with dynamic libraries and after linking to them the program runs without issue. I'll keep trying to hunt down the issues with the static libs. Thanks for the help. Thanks, Matt Heimlich Linux Security Engineer SteelCloud LLC 703.999.4346 F

[openssl-users] X.509 Attribute Certificate status

Hi there, What is the current status of ACs (as defined in X.509 and RFC 575s5) in OpenSSL? When I did some work using them a few years back (10?) there was no real support in the mainline; now I have a use case where they look like a good solution but only if they are well-supported by the tools