Re: AES 256 EVP APIs for encrypting files

2013-04-25 Thread Taraniteja Vishwanatha
I am trying to expose a single API for encryption is to avoid a lot of code changes for those who are consuming it now. Is that possible with EVP API? Thanks, Tarani On Thu, Apr 25, 2013 at 6:46 PM, Matt Caswell wrote: > On 25 April 2013 21:42, Taraniteja Vishwanatha > wrote: > > H

AES 256 EVP APIs for encrypting files

2013-04-25 Thread Taraniteja Vishwanatha
Hey guys, I was using the low level aes APIs and now have switched to EVP ones. My string encryption and decryption always work fine. But when it comes to files, I am getting malloc errors: malloc: *** error for object : incorrect checksum for freed object - object was probably modified after bein

calling incore_macho run script for iOS FIPS from a dynamic library

2013-04-12 Thread Taraniteja Vishwanatha
Hello, I know that we can call the run script incore_macho for fingerprint check from an iOS application. I want ton know whether it is possible to call it from a dynamic library (dylib). Its not very common to build a dylib in iOS but we do have one. When I try to call incore_macho from our dyl

Re: EVP_EncryptFinal_ex

2013-04-08 Thread Taraniteja Vishwanatha
gt; In your case (as in any other), yes, you need to call > EVP_EncryptFinal_ex(). > > Cheers, > Kris > > > 2013/4/8 Taraniteja Vishwanatha > >> Hey all, >> >> >> I am using EVP APIs to do AES 256 encryption. I have a question regarding >> EVP_

EVP_EncryptFinal_ex

2013-04-08 Thread Taraniteja Vishwanatha
Hey all, I am using EVP APIs to do AES 256 encryption. I have a question regarding EVP_EncryptFinal_ex. The documentation says this API is used to encrypt the last few bytes if any remaining. Is this API required? I am allocating the cipher text size before passing into EVP_EncryptUpdate in the

Re: Encrypt a text file in Openssl

2013-03-22 Thread Taraniteja Vishwanatha
Refer to this link: http://bbs.csdn.net/topics/380163925 Tarani On Fri, Mar 22, 2013 at 3:15 PM, Jevin Sonut wrote: > Can anyone post a sample code how to load and break a text file and > prepare the text to be encrypted using AES or DES > > thanks > > -- > > From:- > Shanil J.S >

Re: APIs forbidden in FIPS mode

2013-03-06 Thread Taraniteja Vishwanatha
So any of the API s like AES_cbc_encrypt, SHA1, PKCS5_PBKDF2_HMAC_SHA1, RSA_private_decrypt etc will not work in FIPS mode? I am using many low level API s like these in our crypto module. Now if I change my libcrypto to "FIPS capable" libcrypto, do I have to change al these API s to EVP? Tarani

Re: RSA_private_decrypt failing

2012-11-05 Thread Taraniteja Vishwanatha
, 2012 at 10:57 AM, Taraniteja Vishwanatha < taranit...@gmail.com> wrote: > Hey guys, > > I am generating a RSA key pair (RSA *rsa = RSA_generate_key_ex(key, 3072, > bn, 0) ) and then extract the Public key using PEM_write_bio_RSA_PUBKEY. > The server using this public key encry

Re: RSA public key in x509 format

2012-11-03 Thread Taraniteja Vishwanatha
Thanks Dave. Will give a shot using PEM_write_bio_RSAPUBKEY. On Fri, Nov 2, 2012 at 7:12 PM, Dave Thompson wrote: > >From: owner-openssl-us...@openssl.org On Behalf Of Taraniteja Vishwanatha > >Sent: Friday, 02 November, 2012 18:29 > > Answering only -users, this is not a -de

Re: FIPS_mode_set(1) always returns false

2012-09-10 Thread Taraniteja Vishwanatha
012 10:31 AM, Taraniteja Vishwanatha wrote: > > I have moved the iOS directory to one level above and I am able to > generate > > the 2.0 module. > > One more difference that I have observed between 1.2 and 2.0 for iOS is: > > when I built the FIPS module, I also ha

Re: FIPS_mode_set(1) always returns false

2012-09-10 Thread Taraniteja Vishwanatha
02:47 PM, Taraniteja Vishwanatha wrote: > > ... > >> > >> $ cd openssl-fips-2.0 > >> $ gunzip -c ../ios-incore-2.0.tar.gz | tar xf - > > As you have noted there are some typos, not the last I'm sure. Switch > the order of those two commands: > > $ gunzi

Re: FIPS_mode_set(1) always returns false

2012-09-07 Thread Taraniteja Vishwanatha
navigate io On Fri, Sep 7, 2012 at 2:02 PM, Taraniteja Vishwanatha wrote: > Thanks Steve. Appreciate it. I will build 2.0 Module for iOS 5.1. > > > On Fri, Sep 7, 2012 at 1:57 PM, Steve Marquess < > marqu...@opensslfoundation.com> wrote: > >> On 09/07/2012 01:32 PM, T

Re: FIPS_mode_set(1) always returns false

2012-09-07 Thread Taraniteja Vishwanatha
Just correcting minor typos: On Fri, Sep 7, 2012 at 2:45 PM, Taraniteja Vishwanatha wrote: > Hey Steve, > > I am not able to build the FIPS module 2.0 by following the instructions > in the user guide that you have sent. > > Here are the initial instructions: > >