RE: What's different between RSASSA and RSAPSS padding mode?

2021-05-11 Thread Dr. Matthias St. Pierre
Correction: It seems like the naming of the TPM_ALG_* constants is a little bit inconsistent: According to https://trustedcomputinggroup.org/wp-content/uploads/TCG-_Algorithm_Registry_r1p32_pub.pdf * TPM_ALG_RSASSA refers to RSASSA-PKCS1-v1_5 and * TPM_ALG_RSAPSS refers to RSASSA-PSS. smime

RE: What's different between RSASSA and RSAPSS padding mode?

2021-05-11 Thread Dr. Matthias St. Pierre
It’s the same. The correct full name is RSASSA-PSS, where ‘SSA’ stands for Secure Signature Algorithm (IIRC) and ‘PSS’ for Probabilistic Signature Scheme Regards https://en.wikipedia.org/wiki/PKCS_1#Schemes https://datatracker.ietf.org/doc/html/rfc4056 From: openssl-users On Behalf Of Eddie

What's different between RSASSA and RSAPSS padding mode?

2021-05-11 Thread Eddie Chang
Hi: I'm new comer to openssl. Recently, I study SPDM document https://www.dmtf.org/sites/default/files/standards/documents/DSP0274_0.99a.pdf and feel confused about ReqBaseAsymAlg structure in page 49. In this spec, I saw it can support RSASSA_4096 and RSAPSS_4096. But I check opensl source co

Re: How to access different fields of structure SSL in OpenSSL 3.0

2021-05-11 Thread Tomas Mraz
On Tue, 2021-05-11 at 05:22 +, Kumar Mishra, Sanjeev wrote: > Hi, > How to access different fields of structure SSL in OpenSSL 3.0 ? For > example the code is like this - > > SSL *ssl; > .. > ... > SSL_CTX_set_tlsext_status_cb(ssl->ctx, NULL); > MRM_LOG_INFO("SSL_free ref %d ", ssl->re

Re: Install/Build openssl with following ciphers - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_128_G

2021-05-11 Thread Matt Caswell
On 11/05/2021 05:24, Mario Ds Briggs wrote: thanks Matt. I couldnt find the -stdname option on my macOS openssl, In that case you are most likely not using OpenSSL at all but LibreSSL. Or possibly a very old version of OpenSSL. but using ur example above, i could find the ones they map t