RE: why is my post'd data is being changed?

2009-06-18 Thread Peter Walker
something subtle I am not aware off that would cause a change of data if sent to a webservice but no change if sent to a cgi? I think the answer should be no as the webservice is effectively a cgi itself. Peter Walker Senior Developer Ticketmaster UK 48 Leicester Square London WC2H 7LR T: +44 (0) 207

why is my post'd data is being changed?

2009-06-18 Thread Peter Walker
t it is doing :O So my questions are 1) Why is my data being changed 2) At what point in the execution sequence does CURLOPT_STDERR write the data to the log file? Peter Walker Senior Developer Ticketmaster UK 48 Leicester Square London WC2H 7LR T: +44 (0) 207 022 8547 F: +44 (0) 207 915 0411 M:

RE: Do you have to pre-pend 16 bytes to a raw value before RSA encryption

2008-09-19 Thread Peter Walker
an assume the first few crypted bytes are 'Hi ...' and that's makes your life way easier when you have to break the encryption. Now starting each message with some random gunk instead (= IV), before you send some actual data, causes such kind of assumptions to go striaght down the toilet

RE: Do you have to pre-pend 16 bytes to a raw value before RSA encryption

2008-09-18 Thread Peter Walker
19:25 To: openssl-users@openssl.org Subject: RE: Do you have to pre-pend 16 bytes to a raw value before RSA encryption Peter Walker wrote: > Sorry if this sounds ultra noobish but you guys lost me, even though you > probably did answer my question ;) > > The purpose of my application

RE: Do you have to pre-pend 16 bytes to a raw value before RSA encryption

2008-09-18 Thread Peter Walker
value before RSA encryption Peter Walker wrote: > The purpose of my application is to send a credit card number in > encrypted format. Then use OAEP. - M __ OpenSSL Project http://www.opens

RE: Do you have to pre-pend 16 bytes to a raw value before RSA encryption

2008-09-18 Thread Peter Walker
Sorry if this sounds ultra noobish but you guys lost me, even though you probably did answer my question ;) The purpose of my application is to send a credit card number in encrypted format. So the parent companies webservice issues me a X509 certificate which contains their public RSA key. I ex

RE: Do you have to pre-pend 16 bytes to a raw value before RSA encryption

2008-09-17 Thread Peter Walker
My parent company specified the use of RSA_PKCS1_PADDING and being a complete noob at cryptography I do not know if that is a good or bad choice but it is the one that is forced upon me? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kenneth Gol

Help, I have no idea what I'm doing ;)

2008-09-17 Thread Peter Walker
Okay, I'll admit straight off that I am a openssl noob. First off, I've been struggling with the documentation trying to work out what I'm supposed to do and found that the documentation on openssl.org is very sparse, so is there some commercial documentation I can but for libcrypto? If no

Do you have to pre-pend 16 bytes to a raw value before RSA encryption

2008-09-17 Thread Peter Walker
I just completed writing my first program using libcrypto to handle RSA encryption sing a public key extracted from a X509 certificate. This program communicates with a service created by our parent company. The first attempts that I made to run my program against the service, resulted in an er