[openssl-users] OpenSSL 1.0.2: CVE-2018-5407 PortSmash

Hi, According to the following website:     https://www.openwall.com/lists/oss-security/2018/11/01/4 OpenSSL <= 1.1.0h is affected. Does that mean the problem also exist in the OpenSSL 1.0.2 release? Thank you, -- misaki -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mai

Re: [openssl-users] OpenSSL vs GPG for encrypting files? Security best practices?

Ditto, But don’t tell the Australian Government, it’s probably on their back door request list…;) > On 8 Nov 2018, at 01:26, Bear Giles wrote: > > FWIW I distrust encrypted drives using hardware encryption. This came out > just a few days ago: > https://thehackernews.com/2018/11/self-encry

Re: [openssl-users] In-place encryption/decryption via the EVP_* APIs

Yes it does, thank you Richard! Regards, Terry > On Nov 6, 2018, at 11:12 PM, Richard Levitte wrote: > > In message > on Tue, > 6 Nov 2018 14:46:52 -0800, Terry Chong said: > >> Hi, I am planning on using EVP_* APIs to encrypt/decrypt my data. One thing >> I am wondering >> about is wheth

Re: [openssl-users] OpenSSL vs GPG for encrypting files? Security best practices?

FWIW I distrust encrypted drives using hardware encryption. This came out just a few days ago: https://thehackernews.com/2018/11/self-encrypting-ssd-hacking.html: Flaws in Popular Self-Encrypting SSDs Let Attackers Decrypt Data. On Tue, Nov 6, 2018 at 10:15 PM Nicholas Papadonis < nick.papadonis..