Re: Combining MD5 and SHA-1 to reduce collision probability

ds? Or SHA-512? > That's simpler and probably at least as good as a hybrid. It's still not an absolute guarantee, though. To be honest, I've no particular need, I was just auditing someone else realization... -- Luc Perthuis, Team Le

Combining MD5 and SHA-1 to reduce collision probability

as they are the most used nowadays, but if this association doesn't fit the need whereas another does, that would be interesting anyway ;-) -- Luc Perthuis, Team Leader, Backup and Restore Technologies luc.perth...@atempo.com __

Re: AES in counter mode no support in openssl

last year, or a while before) to explain why this is not implemented. I'm pretty sure you can find your answer in the archives of this mailing list. -- Luc Perthuis, Team Leader, Backup and Restore Technologies luc.perth...@atempo.com T +33 (0)2 97 68 40 26 | M +33 (0)6 89 16 96 37

Re: Complete implementation for CTR mode

the key renewed. And I can't find how this implementation is bending the rules of this RFC3686. But as I said as a preamble, I may well be wrong due to my misunderstandings. -- Luc Perthuis, Team Leader, Backup and Restore Technologies luc.perth...@atempo.com T +33 (0)2 97 68 40 26 | M +33 (

Re: [openssl-users] Re: Which datatype for passphrase?

Steffen DETTMER wrote: (...) BTW, for passphrases to be entered by humans (without binary zeros inside) I think C-strings could be suited, the data type for some entry function could be `char *const passphrase' and for some function that uses it maybe `const char *const passphrase'. Is that right

Re: Library loading issue on multi processor Windows 2003

Marek Marcola wrote: Hello, Mark wrote: I'm not an expert in OpenSSL but AFAIK OpenSSL uses threads internally and the locking callbacks are necessary to synchronise its internal data. Perhaps someone else can clarify this? OpenSSL does not use threads internally and if you don

Re: Library loading issue on multi processor Windows 2003

Mark wrote: Luc, Have you implemented the CRYPTO locking callbacks? Mark __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automate

Re: Library loading issue on multi processor Windows 2003

! Luc Perthuis wrote: > Hello! > We've got an issue using openssl (0.9.8a to 0.9.8d) libraries with our > product. > It works fine on any Unix or even on most windows platforms. > But, unfortunately, it crashes if run on a quadri pro Xeon Windows > 2003 platform. > There

Library loading issue on multi processor Windows 2003

Hello! We've got an issue using openssl (0.9.8a to 0.9.8d) libraries with our product. It works fine on any Unix or even on most windows platforms. But, unfortunately, it crashes if run on a quadri pro Xeon Windows 2003 platform. There is no evidence that's the only platform to show this issue,

Re: AES192 in CTR mode - crypted result looks like ECB

Luc Perthuis wrote: Marty Lamb wrote: How are you deriving CTR from OFB? Well, i imagine the issue is somewhere around there. Unfortunately, i can't figure out where. When i launch './crypt -phrase AES-192-OFB -in small.txt -out small.ssl', i get for exemple: 97 occurrences

Re: Decryption fails

Kaushalye Kapuruge wrote: Hi, Im trying to encrypt/decrypt a string using openssl. The program works fine for encryption but fails(not always) for decryption. This happens in EVP_CipherFinal_ex() call. I'm a bit confused with this random behavior. I've attached the code. Can anybody point me ou

Re: AES192 in CTR mode - crypted result looks like ECB

Marty Lamb wrote: Luc Perthuis wrote: Hello, Any advice on this ECB like behaviour of CTR will be highly appreciated. We are currently integrating openssl in our application. One of the goals is to use symetric encription on streams of data to keep them encrypted on a storage device (1). As

AES192 in CTR mode - crypted result looks like ECB

Hello, Any advice on this ECB like behaviour of CTR will be highly appreciated. We are currently integrating openssl in our application. One of the goals is to use symetric encription on streams of data to keep them encrypted on a storage device (1). As far as we are concerned, CTR mode seems t

Private key pass phrase constraints

A "simple basic question" about usable text in a pass phrase used to protect my private key. Well, it's not really openssl specific, but I imagine that the community here should have an answer. Imagine I'm using softwares "unicode aware", and then I'm used to use greek, cyrilic and arabic characte

Re: Generating certificate

puneet batura wrote: > > Hi, > I am generating a self signed certificate for my application using rsa > but i want to generate the certificate using ecc. This is what i am doing: > > openssl genrsa -out MilitaryGpsKey.pem 2048 > > openssl req -new -x509 -key MilitaryGpsKey.pem -out > MilitaryGpsCe