Re: Key generation question

2004-09-09 Thread Steve Hay
Dr. Stephen Henson wrote: >On Thu, Sep 09, 2004, Steve Hay wrote: > > >>I'm afraid I don't know what "password based encryption" is, so I don't >>know if this is the right thing to even be trying to do. It doesn't >>sound like what I wanted... >> >> >> > >It one of various standards which

Re: Key generation question

2004-09-09 Thread Dr. Stephen Henson
On Thu, Sep 09, 2004, Charles B Cranston wrote: > Perhaps one way to think of the IV is that it is part of the key. > That is, the IV and key are used to encrypt, and then the (same) IV > and the (same) key can decrypt. It's just that if the IV is sent > in clear text ("included in the structure.

Re: Key generation question

2004-09-09 Thread Steve Hay
Charles B Cranston wrote: >Perhaps one way to think of the IV is that it is part of the key. >That is, the IV and key are used to encrypt, and then the (same) IV >and the (same) key can decrypt. > IOW I could hard-code the IV into my source code, or use one supplied by the user at build time (a

Re: Key generation question

2004-09-09 Thread Dr. Stephen Henson
On Thu, Sep 09, 2004, Steve Hay wrote: > Dr. Stephen Henson wrote: > > >On Thu, Sep 09, 2004, Steve Hay wrote: > > > > > > > >>I've no idea what the ASN1_TYPE *param is, or where to get one from. I > >>had a look at EVP_CIPHER_param_to_asn1(), but it says that the cipher IV > >>in the ctx pa

Re: Key generation question

2004-09-09 Thread Charles B Cranston
Perhaps one way to think of the IV is that it is part of the key. That is, the IV and key are used to encrypt, and then the (same) IV and the (same) key can decrypt. It's just that if the IV is sent in clear text ("included in the structure...") then it is not secret. One popular algorithm is to u

Re: Key generation question

2004-09-09 Thread Steve Hay
Dr. Stephen Henson wrote: >On Thu, Sep 09, 2004, Steve Hay wrote: > > > >>I've no idea what the ASN1_TYPE *param is, or where to get one from. I >>had a look at EVP_CIPHER_param_to_asn1(), but it says that the cipher IV >>in the ctx passed to it must be set when the call is made, which seems

Re: Key generation question

2004-09-09 Thread Dr. Stephen Henson
On Thu, Sep 09, 2004, Steve Hay wrote: > Steve Hay wrote: > > It occurs to me that I can make use of PKCS5_v2_PBE_keyivgen() for > 0.9.4+, and just use EVP_BytesToKey() for earlier versions -- the fact > that the latter doesn't support non-default key lengths isn't a problem > because I can't

Re: Key generation question

2004-09-09 Thread Steve Hay
Steve Hay wrote: >El hallabi-Kettani Abderrahmane wrote: > > > >>the function PKCS5_v2_PBE_keyivgen() exist in version >>openssl0.7.9d in directory >>openssl/crypto/evp/p5_crypt.c >>it corresponds to what you want to do . >> >> >> >If you'd read my mail properly, you'd see that I'd already f