rsa encryption and decryption

2002-09-26 Thread Mark W. Webb

I am working on a program that I use to encrypt and decrypt data.  I am
was not sure if I can encrypt and decrypt data, or just keys using the
functions RSA_private_encrypt and RSA_public_decrypt.

thanks...






signature.asc
Description: This is a digitally signed message part


Re: rsa encryption and decryption

2002-09-26 Thread Prasanth

Hello Mark,

Yes, you an encrypt data using RSA.

The only catch is size of the data to be encypted should be less than size
of RSA keys. (i.e  modulo n).

-Prasanth


- Original Message -
From: Mark W. Webb [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, September 26, 2002 1:51 AM
Subject: rsa encryption and decryption
I am working on a program that I use to encrypt and decrypt data.  I am
was not sure if I can encrypt and decrypt data, or just keys using the
functions RSA_private_encrypt and RSA_public_decrypt.

thanks...

__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Disabling the crypt() macro.

2002-09-26 Thread Ben Laurie

Sam Leffler wrote:
 0.9.7 caused massive havoc compiling kerberos 4 (and to some extent 5) when
 I integrated beta 3 into the freebsd tree.  The crypt() macro was a minor
 annoyance.  The bigger problem was the redefinition of the DES key state
 block (from array to struct).  openbsd apparently has workarounds that
 include mods to evp.h but I haven't looked closely at them.  I just took the
 brute force approach and wacked the kerberos code which is probably
 unnacceptable for long term maintenance.

The underlying problem is that kerberos 4 includes bits of 3 and makes 
unwarranted assumptions about the compatibility of doing so (in 
particular, if memory serves, using kerberos 3 headers for OpenSSL 
libraries). I'm not sure how its best to fix this, but when I was 
looking it did seem to me to be clearly a bug in kerberos.

Cheers,

Ben.

-- 
http://www.apache-ssl.org/ben.html   http://www.thebunker.net/

There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit. - Robert Woodruff

__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: rsa encryption and decryption

2002-09-26 Thread Mark W. Webb

that is the problem that I have.  What is the correct size ?

thanks...


On Thu, 2002-09-26 at 04:35, Prasanth wrote:
 Hello Mark,
 
 Yes, you an encrypt data using RSA.
 
 The only catch is size of the data to be encypted should be less than size
 of RSA keys. (i.e  modulo n).
 
 -Prasanth
 
 
 - Original Message -
 From: Mark W. Webb [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Thursday, September 26, 2002 1:51 AM
 Subject: rsa encryption and decryption
 I am working on a program that I use to encrypt and decrypt data.  I am
 was not sure if I can encrypt and decrypt data, or just keys using the
 functions RSA_private_encrypt and RSA_public_decrypt.
 
 thanks...
 
 __
 OpenSSL Project http://www.openssl.org
 Development Mailing List   [EMAIL PROTECTED]
 Automated List Manager   [EMAIL PROTECTED]




signature.asc
Description: This is a digitally signed message part


RE: rsa encryption and decryption

2002-09-26 Thread Steven Reddie

The size of the data must be less than the size of the modulus of the key.
If it's a 1024-bit key (128 bytes) then the data must be at most 128 bytes.
In fact, the data when viewed as a long integer must be of a smaller value
than the modulus.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Mark W. Webb
Sent: Thursday, 26 September 2002 10:29 PM
To: [EMAIL PROTECTED]
Subject: Re: rsa encryption and decryption


that is the problem that I have.  What is the correct size ?

thanks...


On Thu, 2002-09-26 at 04:35, Prasanth wrote:
 Hello Mark,

 Yes, you an encrypt data using RSA.

 The only catch is size of the data to be encypted should be less than size
 of RSA keys. (i.e  modulo n).

 -Prasanth


 - Original Message -
 From: Mark W. Webb [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Thursday, September 26, 2002 1:51 AM
 Subject: rsa encryption and decryption
 I am working on a program that I use to encrypt and decrypt data.  I am
 was not sure if I can encrypt and decrypt data, or just keys using the
 functions RSA_private_encrypt and RSA_public_decrypt.

 thanks...

 __
 OpenSSL Project http://www.openssl.org
 Development Mailing List   [EMAIL PROTECTED]
 Automated List Manager   [EMAIL PROTECTED]


__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: [openssl.org #262] bug: init race in SSLv3_client_method

2002-09-26 Thread Bodo Moeller via RT


On Wed, Sep 25, 2002 at 09:22:20PM +0200,  Patrick McCormick  via RT wrote:

 I was looking at some other code in the ssl directory, and the *_method
 functions in the *_meth.c files appear to use the same initialization idiom
 I believe they need to be thread-protected also.

Fixed.


-- 
Bodo Möller [EMAIL PROTECTED]
PGP http://www.informatik.tu-darmstadt.de/TI/Mitarbeiter/moeller/0x36d2c658.html
* TU Darmstadt, Theoretische Informatik, Alexanderstr. 10, D-64283 Darmstadt
* Tel. +49-6151-16-6628, Fax +49-6151-16-6036

__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Disabling the crypt() macro.

2002-09-26 Thread Richard Levitte - VMS Whacker

In message 00d501c264ae$1bf4f280$[EMAIL PROTECTED] on Wed, 25 Sep 2002 09:10:47 
-0700, Sam Leffler [EMAIL PROTECTED] said:

sam 0.9.7 caused massive havoc compiling kerberos 4 (and to some
sam extent 5) when I integrated beta 3 into the freebsd tree.  The
sam crypt() macro was a minor annoyance.  The bigger problem was the
sam redefinition of the DES key state block (from array to struct).
sam openbsd apparently has workarounds that include mods to evp.h but
sam I haven't looked closely at them.  I just took the brute force
sam approach and wacked the kerberos code which is probably
sam unnacceptable for long term maintenance.

To get definitions compatible with 0.9.5 and 0.9.6, you must define
OPENSSL_ENABLE_OLD_DES_SUPPORT before openssl/des.h gets included.

Also, which Kerberos code are we talking about?  I believe that
kth-krb4 and heimdal have adapted already...

-- 
Richard Levitte   \ Spannvägen 38, II \ [EMAIL PROTECTED]
Redakteur@Stacken  \ S-168 35  BROMMA  \ T: +46-8-26 52 47
\  SWEDEN   \ or +46-708-26 53 44
Procurator Odiosus Ex Infernis-- [EMAIL PROTECTED]
Member of the OpenSSL development team: http://www.openssl.org/

Unsolicited commercial email is subject to an archival fee of $400.
See http://www.stacken.kth.se/~levitte/mail/ for more info.
__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Disabling the crypt() macro.

2002-09-26 Thread Richard Levitte - VMS Whacker

In message 00d501c264ae$1bf4f280$[EMAIL PROTECTED] on Wed, 25 Sep 2002 09:10:47 
-0700, Sam Leffler [EMAIL PROTECTED] said:

sam 0.9.7 caused massive havoc compiling kerberos 4 (and to some extent 5) when
sam I integrated beta 3 into the freebsd tree.  The crypt() macro was a minor
sam annoyance.  The bigger problem was the redefinition of the DES key state
sam block (from array to struct).  openbsd apparently has workarounds that
sam include mods to evp.h but I haven't looked closely at them.  I just took the
sam brute force approach and wacked the kerberos code which is probably
sam unnacceptable for long term maintenance.

BTW, I'm assuming that you wouldn't complain about the removal of
crypt().  I can see your complaint about other things, but nothing
that answered my specific question.

-- 
Richard Levitte   \ Spannvägen 38, II \ [EMAIL PROTECTED]
Redakteur@Stacken  \ S-168 35  BROMMA  \ T: +46-8-26 52 47
\  SWEDEN   \ or +46-708-26 53 44
Procurator Odiosus Ex Infernis-- [EMAIL PROTECTED]
Member of the OpenSSL development team: http://www.openssl.org/

Unsolicited commercial email is subject to an archival fee of $400.
See http://www.stacken.kth.se/~levitte/mail/ for more info.
__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



0.9.6g problem with libpng and KDE 2.2-10 on RedHat 7.2 icons disappear

2002-09-26 Thread Mark Temple

I recently downloaded openssl-0.9.6g.tar.gz and installed it on
Redhat 7.2 using KDE 2.2-10. After I installed it, there was a
dramatic problem with the icons in KDE. Some of the observable
effects were: no redhat icon on the opening screen, an error that
pops up upon login that states: Can't load docking tray icon,
missing icons on the control panel, missing icons on the desktop,
control center errors out.

After restoring from tape all that seemed to make sense, I found
that the problem is corrected by restoring the libpng??? files from
the 0.9.6e version of openssl. There are 4 files I restore that
correct the problem. I'm not sure they are all necessary. But I know
it works if I restore these 4:

cp -f /lib_copy/libpng.a /usr/lib
cp -f /lib_copy/libpng.so /usr/lib
cp -f /lib_copy/libpng.so.2 /usr/lib
cp -f /lib_copy/libpng.so.2.1.0.12 /usr/lib

You may already know about this problem. Please let me know if I'm
onto a real problem, or I have a unique phantom. The md5sum checks
out.

Thanks in advance.

--
--
   Mark Temple, Information Technology Manager
   ABC Labs, Columbia, Missouri 65202
   voice:573.876.8198 fax:573.443.9033
--


__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: 0.9.6g problem with libpng and KDE 2.2-10 on RedHat 7.2 iconsdisappear

2002-09-26 Thread Richard Levitte - VMS Whacker

In message [EMAIL PROTECTED] on Thu, 26 Sep 2002 
14:51:56 -0500 (CDT), Mark Temple [EMAIL PROTECTED] said:

templem After restoring from tape all that seemed to make sense, I found
templem that the problem is corrected by restoring the libpng??? files from
templem the 0.9.6e version of openssl. There are 4 files I restore that
templem correct the problem. I'm not sure they are all necessary. But I know
templem it works if I restore these 4:

Uhmm, I'm really curious about how you could find libpng in OpenSSL.
You must have been smoking something that's not good for you...

-- 
Richard Levitte   \ Spannvägen 38, II \ [EMAIL PROTECTED]
Redakteur@Stacken  \ S-168 35  BROMMA  \ T: +46-8-26 52 47
\  SWEDEN   \ or +46-708-26 53 44
Procurator Odiosus Ex Infernis-- [EMAIL PROTECTED]
Member of the OpenSSL development team: http://www.openssl.org/

Unsolicited commercial email is subject to an archival fee of $400.
See http://www.stacken.kth.se/~levitte/mail/ for more info.
__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: 0.9.6g problem with libpng and KDE 2.2-10 on RedHat 7.2 icons disappear

2002-09-26 Thread Mark Temple

This problem is reproducible. After installing openssl and openssh
(which I always install from a shell script) the problem returns.
When I install 0.9.6e I don't have this problem. If I correct the
problem, install ssl/ssh the problem returns. restoring the files
corrects the problem (every time).


 In message [EMAIL PROTECTED]
 on Thu, 26 Sep 2002 14:51:56 -0500 (CDT), Mark Temple
 [EMAIL PROTECTED] said:

 templem After restoring from tape all that seemed to make sense,
 I found templem that the problem is corrected by restoring the
 libpng??? files from templem the 0.9.6e version of openssl. There
 are 4 files I restore that templem correct the problem. I'm not
 sure they are all necessary. But I know templem it works if I
 restore these 4:

 Uhmm, I'm really curious about how you could find libpng in
 OpenSSL. You must have been smoking something that's not good for
 you...

 --
 Richard Levitte   \ Spannvägen 38, II \ [EMAIL PROTECTED]
 Redakteur@Stacken  \ S-168 35  BROMMA  \ T: +46-8-26 52 47
 \  SWEDEN   \ or +46-708-26 53 44
 Procurator Odiosus Ex Infernis-- [EMAIL PROTECTED]
 Member of the OpenSSL development team: http://www.openssl.org/

 Unsolicited commercial email is subject to an archival fee of
 $400. See http://www.stacken.kth.se/~levitte/mail/ for more
 info.
 __
 OpenSSL Project
 http://www.openssl.org Development Mailing List
[EMAIL PROTECTED] Automated List Manager
  [EMAIL PROTECTED]


--
--
   Mark Temple, Information Technology Manager
   ABC Labs, Columbia, Missouri 65202
   voice:573.876.8198 fax:573.443.9033
--


__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Disabling the crypt() macro.

2002-09-26 Thread Cory Albrecht

--- Richard Levitte - VMS Whacker [EMAIL PROTECTED] wrote:
 BTW, I'm assuming that you wouldn't complain about the removal of
 crypt().  I can see your complaint about other things, but nothing
 that answered my specific question.

I assume it is this bit in des_old.h which you are referring to when
talking about removing the crypt() macro:

#if !defined(PERL5)  !defined(__FreeBSD__)  !defined(NeXT) 
!defined(__OpenBSD__)
#define crypt(b,s)\
DES_crypt((b),(s))
#endif

In my app, those lines cause problems with the two following lines
(304-305) from Perl/lib/CORE/win32iop.h, which was included before
des.h (via EXTERN.h/perl.h/XSUB.h for embedded perl) :

#undef crypt
#define crypt(t,s)  win32_crypt(t,s)

I'm using VC++ on Win2K with ActiveSate's ActivePerl 5.6.1 build 631,
so __FreeBSD__, NeXT  __OpenBSD__ are not defined, and from searching
through all the headers in Perl/lib/CORE the closest to a define of
PERL5 is _INC_WIN32_PERL5 (just your standard #ifndef wrapper to make
sure a .h file doens't get included more than once).

This problem doesn't appear if I define OPENSSL_DISABLE_OLD_DES_SUPPORT.

__
Do you Yahoo!?
New DSL Internet Access from SBC  Yahoo!
http://sbc.yahoo.com
__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: 0.9.6g problem with libpng and KDE 2.2-10 on RedHat 7.2 icons disappear

2002-09-26 Thread Mark Temple

I have found a problem with the way I was installing openssl. I had
a broken copy of libpng??? being picked up and copied to the lib
path.

Sorry about troubling you with this problem. Thanks for the
response. It got me digging deeper.

On another note, what is the latest version of openssl that
circumvents the slapper worm?


 In message [EMAIL PROTECTED]
 on Thu, 26 Sep 2002 14:51:56 -0500 (CDT), Mark Temple
 [EMAIL PROTECTED] said:

 templem After restoring from tape all that seemed to make sense,
 I found templem that the problem is corrected by restoring the
 libpng??? files from templem the 0.9.6e version of openssl. There
 are 4 files I restore that templem correct the problem. I'm not
 sure they are all necessary. But I know templem it works if I
 restore these 4:

 Uhmm, I'm really curious about how you could find libpng in
 OpenSSL. You must have been smoking something that's not good for
 you...

 --
 Richard Levitte   \ Spannvägen 38, II \ [EMAIL PROTECTED]
 Redakteur@Stacken  \ S-168 35  BROMMA  \ T: +46-8-26 52 47
 \  SWEDEN   \ or +46-708-26 53 44
 Procurator Odiosus Ex Infernis-- [EMAIL PROTECTED]
 Member of the OpenSSL development team: http://www.openssl.org/

 Unsolicited commercial email is subject to an archival fee of
 $400. See http://www.stacken.kth.se/~levitte/mail/ for more
 info.
 __
 OpenSSL Project
 http://www.openssl.org Development Mailing List
[EMAIL PROTECTED] Automated List Manager
  [EMAIL PROTECTED]


--
--
   Mark Temple, Information Technology Manager
   ABC Labs, Columbia, Missouri 65202
   voice:573.876.8198 fax:573.443.9033
--


__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



which version of openssl should use ?

2002-09-26 Thread



Hello,all:

 I am delevloping a application using 
openssl, But I donn't know which version I shoulduse, Iconnected 
to ftp://ftp.openssl.org,and found there are 
two directory(sanpshot and source), should I use 
"/sanpshot/openssl-0.9.7-stable-SNAP-20020925.tar.gz" or 
"/source/openssl-0.9.6g.tar.gz"?Is "openssl-0.9.7-stable-SNAP-20020925.tar.gz" more stable and advance 
than "openssl-0.9.6g.tar.gz"?What does the words of "stable","SNAP" 
and "g" mean? Thx a lot!

Best Regards!
   







  zhou guanghua
__Guanghua 
ZhouNoICQ#:163768997


  
  
Current ICQ status:
 
  
(Home Tel#: 
No(Work Tel#: 
No7Fax#: 
No+ More ways to contact me 
__


online?icq=163768997=21
Description: Binary data