ASKDFVS (NIST SP 800-135 ) CAVP testing

2013-04-21 Thread Trevor Jordan
I don't see any test programs covering "Existing Application-Specific Key Derivation Function Validation" (ASKDFVS) for the OpenSSL FIPS validation in the openssl-fips-2.0/test directory, nor any test vectors for it in http://www.openssl.org/docs/fips/fips-2.0-tv.tar.gz. Is this because the F

Re: Use TLS over UDP connection

2013-02-22 Thread Trevor Jordan
On 22/02/2013 6:41 p.m., saurav barik wrote: Hello, I am trying to implement TLS security (in the client side) over a UDP connection. I have a parallel TCP connection(to the same server) over which TLS is already done and it works fine. In the same session of my application I am creating a UDP c

Re: Obtaining a TLS session key

2013-02-06 Thread Trevor Jordan
On 7/02/2013 7:11 p.m., Viktor Dukhovni wrote: On Thu, Feb 07, 2013 at 11:12:13AM +1300, T J wrote: Sorry to keep hammering away at this, but I think I am missing something here. OpenSSL does all this for a TLS connection anyway right? I mean, after a handshake, encryption keys, IV's etc are g

fipscanister.o: file not recognized

2012-09-07 Thread Trevor Jordan
I'm doing a cross platform FIPS build (FIPSv2.0.1 with OpenSSL 1.01c). ./Configure no-asm no-hw linux-generic32 make -j1 -C openssl-fips seems to build ok and produces the fipscanister.o etc in the openssl-fips/fips directory. So far so good, but then cd openssl && \ ./Configure fips no-asm no