RAND_bytes() thread safety

Hi Is OpenSSL function RAND_bytes () thread safe? Thanks Rahul

RAND_bytes() thread safety

Hi Is the OpenSSL function RAND_bytes() thread safe? I do not find any mention about thread safety in its man page. Thanks Rahul

Re: Installing OpenSSL

, Jun 11, 2014 at 12:47 PM, Jeffrey Walton wrote: > On Wed, Jun 11, 2014 at 2:50 AM, Rahul Godbole > wrote: > > Hi > > > > I want to install OpenSSL 1.0.1e on my CentOS 6.4. I downloaded the souce > > and built it by running > > ./config > > make &

Installing OpenSSL

Hi I want to install OpenSSL 1.0.1e on my CentOS 6.4. I downloaded the souce and built it by running ./config make make install The make install is not installing libcrypto.so, libssl.so and openssl binary into /usr/bin and /usr/lib64. I need it to be installed there. Any advice? Thanks Rahul

Re: AES Key Wrap in FIPS Mode

, Rahul Godbole wrote: > Raghav, > > Check openssl/evp.h. Check the man page of EVP_EncryptInit() > > This is the corresponding EVP API > > int EVP_EncryptInit(EVP_CIPHER_CTX *ctx,const EVP_CIPHER *cipher, > const unsigned char *key, const u

Re: AES Key Wrap in FIPS Mode

Raghav, Check openssl/evp.h. Check the man page of EVP_EncryptInit() This is the corresponding EVP API int EVP_EncryptInit(EVP_CIPHER_CTX *ctx,const EVP_CIPHER *cipher, const unsigned char *key, const unsigned char *iv); int EVP_EncryptInit_ex(EVP_CIPHER_CTX *ctx,const EV

Is OpenSSL thread safe?

Hi Is OpenSSL thread safe by default? How can I find out if a particular OpenSSL binary had been compiled with thread support? Thanks Rahul

Disabling EC

Hi I am using OpenSSL 1.0.1c with fips 2.0.2 module. I have issues with the amount of flash and memory it is using since I am using OpenSSL on an embedded system. We are not using Elliptic curve anywhere in the product and would like to disable it. However, if I disable it using the no-ec family

3DES functions in FIPS mode

Hi Are the functions in include/openssl/des.h available in FIPS mode? I am using OpenSSL 1.0.1c. I need to use 3DES in my code. I do not see a EVP wrapper for it. Please let me know if have I missed seeing 3DES wrappers in EVP. Thanks Rahul

Re: Using HMAC through EVP interface?

Does this call not work in FIPS mode? unsigned char *HMAC(const EVP_MD *evp_md, const void *key, int key_len, const unsigned char *d, int n, unsigned char *md, unsigned int *md_len); On Fri, May 24, 2013 at 10:24 AM, Matt Caswell wrote: > On 24 May

Printing OpenSSL console error message in syslog

Hi, Is there a way in which I get have all OpenSSL error messages being printed in the syslog instead of console? Can I set some option or something else in OpenSSL for that? I am using OpenSSL 1.0.1c with fips 2.0.2. Thanks Rahul

Certificate format conversion APIs

Hi OpenSSL Users Can someone tell me API using which I can convert certificates from one format to another? I know that the openssl command can be used for the same but that is not an option for me...I have to do it in code Thanks Rahul

AES wrap APIs in FIPS mode

. Can someone please suggest me the relevant AES wrap API? Thanks in advance for your help! Rahul Godbole

Re: APIs forbidden in FIPS mode

Is there any fips flag that I can set while compiling OpenSSL 1.0.1.c so that any usage of low level APIs will result in a compilation error? On Wed, Mar 6, 2013 at 8:47 PM, Dr. Stephen Henson wrote: > On Wed, Mar 06, 2013, Taraniteja Vishwanatha wrote: > > > So any of the API s like AES_cbc_enc

Re: X.509 certificates in OpenSSL FIPS 2.0

These functions are in util/libeay.num.There is also a util/ssleay.num. What are these files here for? On Thu, Jan 17, 2013 at 5:45 PM, Rahul Godbole wrote: > I see some function names for previous OpenSSL FIPS versions in FIPS 2.0. > For example, d2i_X509(), X509_STORE_C

Re: X.509 certificates in OpenSSL FIPS 2.0

I see some function names for previous OpenSSL FIPS versions in FIPS 2.0. For example, d2i_X509(), X509_STORE_CTX_new(), X509_STORE_new(), . How do I use them so that my existing code still works with OpenSSL FIPS 2.0? Thanks, Rahul On Thu, Jan 17, 2013 at 12:47 PM, Rahul Godbole wrote

X.509 certificates in OpenSSL FIPS 2.0

Hi We are using X.509 certificates in our product and are newly moving to OpenSSL FIPS 2.0 from previous versions. I see issues in calling the previous X.509 APIs in this version. The directory crypto/x509 not there in OpenSSSL 2.0. Can someone please tell me how I could use x509 certificates wit

Re: OpenSSL FIPS build/link issues

Thanks Jeff. Please see inline. On Mon, Jan 14, 2013 at 5:24 PM, Jeffrey Walton wrote: > On Mon, Jan 14, 2013 at 5:52 AM, Rahul Godbole > wrote: > > > > 1) I am trying to build OpenSSL for FIPS. When I link to the below > > functions from an external program linking

OpenSSL FIPS build/link issues

Hi Can someone please help me on the following 2 issues? I am using FIPS 2.0 1) I am trying to build OpenSSL for FIPS. When I link to the below functions from an external program linking to libcrypto.a, I get a linking error for them. When I grepped for the below functions in libcrypto.a and aes