Re: [openssl-users] In-place encryption/decryption via the EVP_* APIs

2018-11-06 Thread Richard Levitte
In message on Tue, 6 Nov 2018 14:46:52 -0800, Terry Chong said: > Hi, I am planning on using EVP_* APIs to encrypt/decrypt my data. One thing I > am wondering > about is whether I can do in-place encryption, meaning I don't have to pay > the price of an extra > memory buffer to store my ciphe

Re: [openssl-users] Trouble installing openssl 1.1.0 on Ubuntu 14.04

2018-11-06 Thread Richard Levitte
In message <1541454675952-0.p...@n7.nabble.com> on Mon, 5 Nov 2018 14:51:15 -0700 (MST), EcolaneAdam said: > Hello, > > Several months ago I had configured ansible to deploy openssl upgrades to > our Ubuntu 14.04 servers and did so with the following version via apt > module: > - libssl

Re: [openssl-users] OpenSSL vs GPG for encrypting files? Security best practices?

2018-11-06 Thread Nicholas Papadonis
Interesting. How about this for a start? http://nickpapadonis.com/images-share/summerian-ancient-mesopotamia-ancient-lock.jpg http://nickpapadonis.com/images-share/anunnaki1.jpg http://nickpapadonis.com/images-share/summerian-Winged_Human-headed_Bulls.JPG On Sun, Nov 4, 2018 at 7:21 PM open...@f

[openssl-users] In-place encryption/decryption via the EVP_* APIs

2018-11-06 Thread Terry Chong
Hi, I am planning on using EVP_* APIs to encrypt/decrypt my data. One thing I am wondering about is whether I can do in-place encryption, meaning I don't have to pay the price of an extra memory buffer to store my cipher text and a potential memcpy back to the source buffer. I tried that with the

Re: [openssl-users] updating openssl

2018-11-06 Thread Wim Lewis
On 6. nóv. 2018, at 2:02 e.h., Paul wrote: > I configured Openvpn server on ubuntu 16.04 and ubuntu was using a old > version of openssl 1.0.2 and I was updating openssl to v1.1.1 > Now I've installed the openssl but now unable to mv file installed to ln -s > /usr/local/ssl/bin/openssl /usr/bin

[openssl-users] OpenSSL 1.0.2: CVE-2018-0735

2018-11-06 Thread Misaki Miyashita
Hi, According to the vulnerabilities website[1], OpenSSL 1.1.i and earlier and 1.1.1 are affected by CVE-2018-0735. Is it safe to assume that OpenSSL 1.0.2 is not affected by the CVE? Thank you, -- misaki [1] https://www.openssl.org/news/vulnerabilities.html CVE-2018-0735 (OpenSSL advisory)

[openssl-users] updating openssl

2018-11-06 Thread Paul
I configured Openvpn server on ubuntu 16.04 and ubuntu was using a old version of openssl 1.0.2 and I was updating openssl to v1.1.1 Now I've installed the openssl but now unable to mv file installed to ln -s /usr/local/ssl/bin/openssl /usr/bin/openssl failed to create symbolic link '/usr/bin/opens

Re: [openssl-users] Exclude unwanted ciphers during build

2018-11-06 Thread Michael Wojcik
> From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of > pgndev > Sent: Tuesday, November 06, 2018 15:45 > https://wiki.openssl.org/index.php/Compilation_and_Installation > Usage: Configure [no- ...] [enable- ...] ... And it's documented in the INSTALL file in the tarball

Re: [openssl-users] Exclude unwanted ciphers during build

2018-11-06 Thread pgndev
https://wiki.openssl.org/index.php/Compilation_and_Installation Usage: Configure [no- ...] [enable- ...] ... ^^^ -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

[openssl-users] Exclude unwanted ciphers during build

2018-11-06 Thread Chris Clark
Is there a simple way of excluding unwanted ciphers or cipher suites during a build? I would like to remove ARIA in particular, but may want to remove additional ones in order to use a smaller footprint. -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl