RE: generating keys from passwords

2010-09-13 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of muell...@mathematik.hu-berlin.de > Sent: Monday, 13 September, 2010 05:08 > > md5(admin [NO NEWLINE])= 21232f297a57a5a743894a0e4a801fc3 > The next step is to understand the insertion of salt. I tried to > understand 'enc.c' and 'evp_key.c', f

RE: generating keys from passwords

2010-09-13 Thread muellste
>> i am wondering how key derivation in openssl works, I got >> >> > > openssl enc -des -P -k 'admin' -nosalt >> key=21232F297A57A5A7 >> iv =43894A0E4A801FC3 >> >> as far i understand the documentation, in this setting the >> key and iv are >> just taken from >> >> md5(admin)=456b7016a916a4b178dd72

RE: generating keys from passwords

2010-09-10 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Sam Jantz > Sent: Friday, 10 September, 2010 16:42 > It's actually a mix of a couple of hashes. Specifically > md5, and sha1 according to the spec. > The best place to look for this would be [RFC2246] That's k

Re: generating keys from passwords

2010-09-10 Thread Sam Jantz
It's actually a mix of a couple of hashes. Specifically md5, and sha1 according to the spec. The best place to look for this would be the standard RFC document since OpenSSL complies to that. The TLSv1 RFC (linked here: http://www.ietf.org/rfc/rfc2246.txt) contains how the key material is genera

RE: generating keys from passwords

2010-09-10 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Stephan Müller > Sent: Friday, 10 September, 2010 14:58 > i am wondering how key derivation in openssl works, I got > > > > openssl enc -des -P -k 'admin' -nosalt > key=21232F297A57A5A7 > iv =43894A0E4A801FC3 > > as far i understand the docume