Re: AES Key Wrap in FIPS Mode

2014-05-22 Thread Raghav Varadan
Thanks Dr. Stephen Henson & Rahul! On Wed, May 21, 2014 at 11:35 PM, Rahul Godbole wrote: > Raghav, > > Check openssl/evp.h. Check the man page of EVP_EncryptInit() > > This is the corresponding EVP API > > int EVP_EncryptInit(EVP_CIPHER_CTX *ctx,const EVP_CIPHER *cipher, > c

Re: AES Key Wrap in FIPS Mode

2014-05-22 Thread Dr. Stephen Henson
On Wed, May 21, 2014, Raghav Varadan wrote: > Hi, > > I'm using Openssl FIPS in my application. The application does some AES Key > Wrap/Unwrap and uses function calls to > AES_set_encrypt_key()/AES_wrap_key()/AES_unwrap_key(). But in FIPS mode > call to these low-level crypto function calls are

Re: AES Key Wrap in FIPS Mode

2014-05-21 Thread Rahul Godbole
AES wrap/unwrap APIs look absent in FIPS mode. You might need to code the AES wrap algo using EVP AES wrappers for FIPS mode operation. I asked about the same more than an year back. http://openssl.6102.n7.nabble.com/AES-wrap-APIs-in-FIPS-mode-td44945.html On Thu, May 22, 2014 at 12:05 PM, R

Re: AES Key Wrap in FIPS Mode

2014-05-21 Thread Rahul Godbole
Raghav, Check openssl/evp.h. Check the man page of EVP_EncryptInit() This is the corresponding EVP API int EVP_EncryptInit(EVP_CIPHER_CTX *ctx,const EVP_CIPHER *cipher, const unsigned char *key, const unsigned char *iv); int EVP_EncryptInit_ex(EVP_CIPHER_CTX *ctx,const EV

AES Key Wrap in FIPS Mode

2014-05-21 Thread Raghav Varadan
Hi, I'm using Openssl FIPS in my application. The application does some AES Key Wrap/Unwrap and uses function calls to AES_set_encrypt_key()/AES_wrap_key()/AES_unwrap_key(). But in FIPS mode call to these low-level crypto function calls are forbidden. I would like to know if there is an EVP* inter