Re: FIPS_selftest_drbg_all()

2021-09-28 Thread Kory Hamzeh
Never mind the question about FIPS_selftest_drbg_all(). I saw what is being done in the openssl app. However, I am looking for something similar to FIPS_set_error_callbacks() as a general solution. ERR_errors_print_cb() looks like it immediately invoked the callback on previous errors? > On S

FIPS_selftest_drbg_all()

2021-09-28 Thread Kory Hamzeh
Hello, For our FIPS 140-2 POST KAT sequence, I use FIPS_selftest_drbg() and FIPS_selftest_drbg_all() from openssl-fips-2.0.5. I was wondering what would be the best way to perform the same functionality with OpenSSL 3.0.0. Thanks, Kory

Re: Why custom RSA engine is not calling default RSA method?

2021-09-28 Thread Shariful Alam
Dear Dmitry, Thank you for your response. Here is the stack trace = $ strace openssl rsautl -encrypt -inkey public.pem -pubin -in msg.txt -out msg.enc -engine rsa-engine-new

Re: Why custom RSA engine is not calling default RSA method?

2021-09-28 Thread Dmitry Belyavsky
Dear Shariful, Could you please also provide a stack trace of your segfault? On Tue, Sep 28, 2021 at 1:06 AM Shariful Alam wrote: > Hello, > I have the following simple RSA engine code from *e_dasync.c. * Following > code compiles and works. Until now, I was under the impression that if I do >

Re: EVP_EncryptInit_ex2() operation

2021-09-28 Thread Tomas Mraz
On Mon, 2021-09-27 at 15:15 -0400, Ken Goldman wrote: > Does it make sense to initialize the context once and then use it > multiple times, or is cleaner to create a new one from the raw key > byte string each time? It is not necessary. The reinitialization is supported to avoid recreating key sch