Re: Dual_EC_DRBG

2013-09-24 Thread yustein
.openssl.org > User Support Mailing List[hidden email] > Automated List Manager [hidden email] > > > If you reply to this email, your message will be added to the discussion > below: > http://openssl.6102.n7.nabble.com/Dual-EC-D

Re: Dual_EC_DRBG

2013-09-24 Thread Steve Marquess
On 09/24/2013 07:27 AM, Dr. Stephen Henson wrote: > ... > > Future versions of OpenSSL will fail if an attempt is made to use the Dual EC > DRBG. Note we're also looking into removing Dual EC DRBG from the OpenSSL FIPS Object Module, a more difficult proposition as there are strict restrictions o

Re: Dual_EC_DRBG

2013-09-24 Thread Tony Yustein
Thanks a lot! :) Tony Sent from my iPhone > On Sep 24, 2013, at 2:27 PM, "Dr. Stephen Henson" wrote: > >> On Mon, Sep 23, 2013, yustein wrote: >> >> Hi, >> >> Does OpenSSL use this by default, if not where do a user choose which method >> to use for CSPRNG? > > The default DRBG for OpenSSL

Re: Dual_EC_DRBG

2013-09-24 Thread Dr. Stephen Henson
On Mon, Sep 23, 2013, yustein wrote: > Hi, > > Does OpenSSL use this by default, if not where do a user choose which method > to use for CSPRNG? > The default DRBG for OpenSSL is 256 bit AES CTR_DRBG. The default can be changed by using the compile time flags: -DOPENSSL_DRBG_DEFAULT_TYPE=type

Dual_EC_DRBG

2013-09-24 Thread yustein
Hi, Does OpenSSL use this by default, if not where do a user choose which method to use for CSPRNG? Thanks, Tony -- View this message in context: http://openssl.6102.n7.nabble.com/Dual-EC-DRBG-tp46628.html Sent from the OpenSSL - User mailing list archive at Nabble.com. __