[openssl-users] CMS-supported ciphers

Hello! I see the CMS-Interface (CMS_encrypt, X_write_CMS, ...) does not support AES128-GCM. https://mta.openssl.org/pipermail/openssl-dev/2015-April/001177.html Is there a list of all supporting ciphers for CMS? Or how can I find out without trying it? Thanks! Chris -- openssl-users mailin

[openssl-users] CMS/SMIME: RSASSA-PSS, RSAES-OAEP

Hello! I have an application that uses 3DES for encryption and SHA1 for signing. It is MIME-content and so I use SMIME and CMS. Is there a way to do RSAES-OAEP for keyencryption and RSASSA-PSS for signing with the commandline-tools too or do I need to use the API? Cheers, Chris -- openssl-use

Re: [openssl-users] PKCS7 and RSA_verify

28-09-17 01:19, ch wrote> If the pkcs-signature is binary encoded it is not working for verifiying a SMIME-message in my experience with smime or cms-smime on the console. I tried to convert the binary ones to base64 but that does not everytime the trick. What you call "base64" is comm

Re: [openssl-users] PKCS7 and RSA_verify

Hello! Thanks for the support. On 2017-09-28 01:06, Dr. Stephen Henson wrote: On Thu, Sep 28, 2017, ch wrote: Hello! I am working on a tool for verifying SMIME-messages. Because cms and smime is only able to verify base64 pkcs7-signatures I try to do it "manually" and I now have

[openssl-users] PKCS7 and RSA_verify

Hello! I am working on a tool for verifying SMIME-messages. Because cms and smime is only able to verify base64 pkcs7-signatures I try to do it "manually" and I now have a problem with the signing-timestamp. Lets do an example: openssl smime -sign -md sha1  -in plain.txt  -inkey mykey -signer

verify without issuer-certificate?

hi! Can I verify a message or just a certificate WITHOUT having all the issuer certificats (up to the RootCA) in my store?? Is there a option in the commandline tools? I was not able to find one in the man-pages. thanks, chris __

Re: cms sign with md5

kartik rustagi wrote: Which error? On Tue, Sep 14, 2010 at 3:34 PM, ch <mailto:ch_m...@gmx.at>> wrote: hi all! how can I tell openssl cms to sign not with sha1 but with md5? i tried the -md5 option but got an error. thanks! br,

cms sign with md5

hi all! how can I tell openssl cms to sign not with sha1 but with md5? i tried the -md5 option but got an error. thanks! br, chris __ OpenSSL Project http://www.openssl.org User Support Mailing

extract the signature from a signed message

hi! is it possible to extracht from a signed mime-message just the signature? i will parse it with asn1parse, but this needs just the signature as far i figured out. if i give it the whole message it struggles. or how is it possible to pass a whole signed message to asn1parse? thanks for hel

Re: UltraSPARC T2 - OpenSSL - PKCS11 ???

Thanks for your help everyone ! I've checked T5120 hardware specifications : 8 cores 8 threads/core so I used the multi 64 option : signverifysign/s verify/s rsa 512 bits 0.s 0.s 121283.7 202718.0 rsa 1024 bits 0.s 0.s 30643.1 1158

UltraSPARC T2 - OpenSSL - PKCS11 ???

Hi, I'm currently working on a project involving a Sun T5120 and some crypto... (I'm also to to OpenSSL & T2) T2 is supposed to be quite fast for crypto operations : openssl speed rsa signverifysign/s verify/s rsa 512 bits 0.0047s 0.0005s210.7 207