Re: FIPS capable openssl X509_get_pub_key

2009-09-23 Thread Dr. Stephen Henson
On Wed, Sep 23, 2009, Pankaj Aggarwal wrote: > Ok !! > > Stephen, Could you tell me which RSA Sign Verfiy functions are available in > fips mode. The FIPS 140-2 Annexure A states that RSASSA-PKCS1-v1_5 and > RSASSA-PSS contained within PKCS#1 v2.1 can be used for sign/verify. What > are the corre

Re: FIPS capable openssl X509_get_pub_key

2009-09-22 Thread Pankaj Aggarwal
Ok !! Stephen, Could you tell me which RSA Sign Verfiy functions are available in fips mode. The FIPS 140-2 Annexure A states that RSASSA-PKCS1-v1_5 and RSASSA-PSS contained within PKCS#1 v2.1 can be used for sign/verify. What are the corresponding OpenSSL function which should be used? Pankaj

Re: FIPS capable openssl X509_get_pub_key

2009-09-22 Thread Dr. Stephen Henson
On Tue, Sep 22, 2009, Pankaj Aggarwal wrote: > Hi, > > My code is using the FIPS capable openssl (0.9.8j) in FIPS Mode. > > X509_get_pub_key function is used to retrieve the public key from a signing > certificate. > > > pubKey = X509_get_pubkey(x509Cert); > > The returned pubKey has the FIPS

FIPS capable openssl X509_get_pub_key

2009-09-21 Thread Pankaj Aggarwal
Hi, My code is using the FIPS capable openssl (0.9.8j) in FIPS Mode. X509_get_pub_key function is used to retrieve the public key from a signing certificate. pubKey = X509_get_pubkey(x509Cert); The returned pubKey has the FIPS ALLOW Flag set : if((pubKey->pkey.rsa)->flags & RSA_FLAG_NON_FIPS_