Re: Can AES-NI be disabled?

E3 optimizations for x86-64. That's exactly what I wished for. I'll try it. Regards MauMau __ OpenSSL Project http://www.openssl.org User Support Mailing Listopens

Can AES-NI be disabled?

Is it possible to turn on and off AES-NI of OpenSSL with any configuration? I appreciate it if it is possible to switch AES-NI without re-building OpenSSL. Regards MauMau __ OpenSSL Project

Re: How can I use OpenSSL to store symmetric encryption keys in PKCS#12 file?

From: "Dr. Stephen Henson" On Mon, Jul 09, 2012, MauMau wrote: >[Questions] >Q1: >I want to encrypt the master encryption key with an >administrator-supplied password. I'm considering storing the >master encryption keys in SecretBag entries of a PKCS#12 file, &

Re: How can I use OpenSSL to store symmetric encryption keys in PKCS#12 file?

cs12_parse()? I couldn't find appropriate medium-level API to manipulate SecretBags despite the below statement in Changelog. I would be grateful if you could give me the pointers to sample programs as well. Regards MauMau - Original Message - From: "MauMau" To:

How can I use OpenSSL to store symmetric encryption keys in PKCS#12 file?

used with OpenDNSSEC, and cannot be used as a standalone keystore. Home - SoftHSM - OpenDNSSEC https://wiki.opendnssec.org/display/SoftHSM/Home Sorry for my long mail. I appreciate any comments and suggestions. Regards MauMau __

Re: Please tell me about encryption API of OpenSSL 1.0.1

k may be relatively long compared to tehe I/O. Hmm... Regards MauMau __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.o

Re: Please tell me about encryption API of OpenSSL 1.0.1

/* fall-through */ case EVP_CIPH_CBC_MODE: ... break; case EVP_CIPH_CTR_MODE: ... break; default: return 0; break; } } -- Q2: Is AES-XTS slower than AES-CBC? Does AES-NI speed up AES-XTS like AES-CBC?

Re: Please tell me about encryption API of OpenSSL 1.0.1

But folks here gave me suggestions that different IVs should be used for each 4KB block. I think I should do that, and I'd like to follow those precious advice. (However, I'm wondering if it is really dangerous to use the same IV for all blocks in a file,

Re: Please tell me about encryption API of OpenSSL 1.0.1

ate(&enc_ctx, block2, &outlen, block2, 4096); /* decrypt second block */ EVP_DecryptUpdate(&dec_ctx, block2, &outlen, block2, 4096); /* decrypt first block */ EVP_DecryptInit_ex(&dec_ctx, NULL, NULL, NULL, NULL); EVP_DecryptUpdate(&dec_ctx, block1, &outlen, block1, 4096);

Re: Please tell me about encryption API of OpenSSL 1.0.1

or each block/record. Regards MauMau __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org

Re: Please tell me about encryption API of OpenSSL 1.0.1

ER_CTX_iv_length(ctx)); memcpy(ctx->iv, ctx->oiv, EVP_CIPHER_CTX_iv_length(ctx)); break; ... if(key || (ctx->cipher->flags & EVP_CIPH_ALWAYS_CALL_INIT)) { if(!ctx->cipher->init(ctx,key,iv,enc)) return 0; } Regards MauMau

Please tell me about encryption API of OpenSSL 1.0.1

date(&dec_ctx, block1, &outlen, block1, 4096); The above code produces wrong data for block2. One of the following seems to fix this problem. But is there any way to use CBC without repeated calls to EVP_EncryptInit_ex/EVP_DecryptInit_ex? 1. Call EVP_EncryptInit_ex/EVP_DecryptInit_ex before