[openssl-users] AES CMAC with given iv

2017-10-02 Thread Stefan Grünwald
Hi, I need to calculate an AES CMAC with a given iv and also get the new iv after the calculation. On the internet I found some examples how to calculate the CMAC but if I read the code correctly it always starts with a zero iv. I also found the CMAC_resume function which restores the iv but it

Re: [openssl-users] Engine configuration

2017-10-02 Thread Dr. Stephen Henson
On Mon, Oct 02, 2017, Dmitry Belyavsky wrote: > Hello, > > I have a question regarding engine configuration. > > We need to implement such behaviour: > - on load the engine is configured with the commands from config file, but > the values can be overwritten via environment That part can be don

[openssl-users] Engine configuration

2017-10-02 Thread Dmitry Belyavsky
Hello, I have a question regarding engine configuration. We need to implement such behaviour: - on load the engine is configured with the commands from config file, but the values can be overwritten via environment - application can change the engine's configuration via ENGINE_ctrl_string functio

Re: [openssl-users] FIPS Object Module 2.0, fipsalgtest.pl fails

2017-10-02 Thread Steve Marquess
On 10/02/2017 10:29 AM, Diaz de Grenu, Jose wrote: > >> The FIPS module and test suite software (fipsalgtest.pl) are designed to >> work with exactly those algorithm tests relevant to the associated >> validations >> (#1747/2398/2473). The test labs generate a unique set of test vectors for >>

Re: [openssl-users] FIPS Object Module 2.0, fipsalgtest.pl fails

2017-10-02 Thread Diaz de Grenu, Jose
> The FIPS module and test suite software (fipsalgtest.pl) are designed to work > with exactly those algorithm tests relevant to the associated validations > (#1747/2398/2473). The test labs generate a unique set of test vectors for > each platform validation; those test vectors must be of the e

Re: [openssl-users] Integrating New Cipher Suite

2017-10-02 Thread Jakob Bohm
On 02/10/2017 00:47, Dr. Stephen Henson wrote: On Sun, Oct 01, 2017, Wallboy wrote: Hi, ... Bonus Question: Is it possible to remove the SCSV cipher in the ClientHello? You can't remove it without making source changes. Again it's in the ssl_cipher_list_to_bytes() function. Have you tried