Re: DSA signatures in OpenSSL 3.0

2022-03-14 Thread Richard Dymond
On Mon, 14 Mar 2022 at 11:03, Tomas Mraz wrote: > On Mon, 2022-03-14 at 08:58 -0300, Richard Dymond wrote: > > By the way, the reason I need to get the 'r' and 's' values from the > > DSA signature is that I am encoding them one after the other as 160- > > bit unsigned integers, in network byte o

Re: DSA signatures in OpenSSL 3.0

2022-03-14 Thread Tomas Mraz
On Mon, 2022-03-14 at 08:58 -0300, Richard Dymond wrote: > On Mon, 14 Mar 2022 at 04:52, Tomas Mraz wrote: > > The DSA_SIG_* functions are not deprecated including the i2d and > > d2i > > functions. So you can use d2i_DSA_SIG to decode the DER produced by > > the > > EVP_DigestSign() and then obta

Re: DSA signatures in OpenSSL 3.0

2022-03-14 Thread Richard Dymond
On Mon, 14 Mar 2022 at 04:52, Tomas Mraz wrote: > The DSA_SIG_* functions are not deprecated including the i2d and d2i > functions. So you can use d2i_DSA_SIG to decode the DER produced by the > EVP_DigestSign() and then obtain the r and s values from the DSA_SIG. > Thank you, that works! For so

Re: DSA signatures in OpenSSL 3.0

2022-03-14 Thread Tomas Mraz
On Fri, 2022-03-11 at 15:21 -0400, Richard Dymond wrote: > Hi > > I recently migrated an application from OpenSSL 1.1.1 to OpenSSL 3.0, > and I'm wondering how best to handle DSA signatures - specifically, > the 'r' and 's' values - in OpenSSL 3.0. &

DSA signatures in OpenSSL 3.0

2022-03-11 Thread Richard Dymond
Hi I recently migrated an application from OpenSSL 1.1.1 to OpenSSL 3.0, and I'm wondering how best to handle DSA signatures - specifically, the 'r' and 's' values - in OpenSSL 3.0. In OpenSSL 1.1.1, it was pretty easy: DSA_do_sign() - gets you a DSA_SIG DSA_SIG_get0()

Re: Predictability of DSA signatures (first 8 bytes)

2006-10-10 Thread Dr. Stephen Henson
On Tue, Oct 10, 2006, Erik Leunissen wrote: > When computing DSA signatures, the first eight bytes of the signature > appear to follow a rather predictable pattern, which I am concerned about. > > I've tested this to be so using two slightly different input texts: > 1. &qu

Re: Predictability of DSA signatures (first 8 bytes)

2006-10-10 Thread Marek Marcola
Hello, > When computing DSA signatures, the first eight bytes of the signature > appear to follow a rather predictable pattern, which I am concerned about. > > I've tested this to be so using two slightly different input texts: > 1. "Mary had a little lamb" > 2.

Re: Predictability of DSA signatures (first 8 bytes)

2006-10-10 Thread Aki Tuomi
Erik Leunissen kirjoitti: > When computing DSA signatures, the first eight bytes of the signature > appear to follow a rather predictable pattern, which I am concerned about. > > I've tested this to be so using two slightly different input texts: > 1. "Mary had a litt

Re: Predictability of DSA signatures (first 8 bytes)

2006-10-10 Thread Erik Leunissen
Erik Leunissen wrote: ... The signatures (if expressed in hexadecimal format) all start with an 8 byte sequence that matches the regular expression: 302[cde]021[45] ... Of course that should be: "the first 4 bytes", which corresponds to "the first 8 hex digits" Duh! Erik Leunissen _

Predictability of DSA signatures (first 8 bytes)

2006-10-10 Thread Erik Leunissen
When computing DSA signatures, the first eight bytes of the signature appear to follow a rather predictable pattern, which I am concerned about. I've tested this to be so using two slightly different input texts: 1. "Mary had a little lamb" 2. "Mary had a little lama&quo

Re: DSA signatures

2003-09-22 Thread Frank
Steve,     That did it!! Thanks a bunch Frank Dr. Stephen Henson wrote: On Mon, Sep 22, 2003, Frank wrote: Nils, Humm I tried this and got a error during signing 1436:error:0606B06E:digital envelope routines:EVP_SignFinal:wrong public key typ e:p_sign.c:101: The p

Re: DSA signatures

2003-09-22 Thread Dr. Stephen Henson
On Mon, Sep 22, 2003, Frank wrote: > Nils, >Humm I tried this and got a error during signing > > 1436:error:0606B06E:digital envelope routines:EVP_SignFinal:wrong public > key typ > e:p_sign.c:101: > > The private key I used was one read in when I generated a DSA > certficate. the header

Re: DSA signatures

2003-09-22 Thread Frank
Nils,     Humm I tried this and got a  error during signing 1436:error:0606B06E:digital envelope routines:EVP_SignFinal:wrong public key typ e:p_sign.c:101: The private key I used was one read in when I generated a DSA certficate.  the headers say DSA Any thoughts?   Same routine I used for

Re: DSA signatures

2003-09-20 Thread Nils Larsch
On Friday 19 September 2003 21:17, Frank wrote: > Nils Larsch wrote: > > On Friday 19 September 2003 15:28, Frank wrote: > > > What I've seen so far with openssl is that there seems to be 10,000 > > > ways to do the same thing so I want to make sure I understand how to do > > > a DSA signature. My

Re: DSA signatures

2003-09-19 Thread Frank
Nils Larsch wrote: > On Friday 19 September 2003 15:28, Frank wrote: > > What I've seen so far with openssl is that there seems to be 10,000 ways > > to do the same thing so I want to make sure I understand how to do a DSA > > signature. My questions are as follows: > > > > 1. Do you need a sep

Re: DSA signatures

2003-09-19 Thread Nils Larsch
On Friday 19 September 2003 15:28, Frank wrote: > What I've seen so far with openssl is that there seems to be 10,000 ways > to do the same thing so I want to make sure I understand how to do a DSA > signature. My questions are as follows: > > 1. Do you need a separte cert for signing RSA DSA? I c

DSA signatures

2003-09-19 Thread Frank
What I've seen so far with openssl is that there seems to be 10,000 ways to do the same thing so I want to make sure I understand how to do a DSA signature. My questions are as follows: 1. Do you need a separte cert for signing RSA DSA? I created certs with the following shell (create parms and c

Re: DSA signatures and custom (X.509) certificate extensions

2003-03-20 Thread Dr. Stephen Henson
On Mon, Mar 17, 2003, Henrik Grindal Bakken wrote: > "Dr. Stephen Henson" <[EMAIL PROTECTED]> writes: > > > On Thu, Mar 13, 2003, Henrik Grindal Bakken wrote: > > > >> Firstly, I want to make a signature on a file using a DSA key-pair. > >> I can do this for an RSA pair with 'openssl rsautl', but

Re: DSA signatures and custom (X.509) certificate extensions

2003-03-20 Thread Henrik Grindal Bakken
"Dr. Stephen Henson" <[EMAIL PROTECTED]> writes: > On Thu, Mar 13, 2003, Henrik Grindal Bakken wrote: > >> Firstly, I want to make a signature on a file using a DSA key-pair. >> I can do this for an RSA pair with 'openssl rsautl', but is there >> something similar for DSA, or do I have to write it