Re: SSL and "custom" EVP_KEY

2021-11-01 Thread Alex Dankow
y yet. But it was planned so and maybe we will see it in the future. If ENGINE is now deprecated (is it?), what HSM vendors should do? -- Alex Dankow On Fri, Oct 29, 2021 at 10:11 PM Matt Caswell wrote: > Hi Alex, > > On 29/10/2021 14:32, Alex Dankow wrote: > > Hi Open

SSL and "custom" EVP_KEY

2021-10-29 Thread Alex Dankow
something, but if you built a key management system, sign interface, ciphers that allows key virtualization, why not go further ? I'm ready to implement the encryption interface, but why OpenSSL still care about key type name. In the new era of version 3, it can check if the key provides necessary interfaces. -- Alex Dankow

OSSL_DECODER_CTX_new_for_pkey can't find decoder

2021-10-25 Thread Alex Dankow
ext It works completely. Am I missing something or is it a bug ? -- Best Regards Alex Dankow

Matching keys between providers

2021-10-22 Thread Alex Dankow
and says types are different. If I declare that my key management also handles RSA in OSSL_ALGORITHM as "MYPKEY:RSA" OpenSSL tool gives an error that RSA has an existing different identity. I'm exploring the source, but I'm stuck. Is it the wrong approach or I missed something ? -- Best Regards Alex Dankow

[openssl-users] Low level AES alternative in FIPS-140 OpenSSL

2018-02-03 Thread Alex Dankow via openssl-users
changes of IV and I can't find a way to set it other than EVP_CipherInit. Initialization, however, relatively high time-consuming operation. Question: Is there a way to set IV for CTX after its initialization for FIPS version of OpenSSL? -- Best regards, Alex Dankow