Re: [PATCH] md4 for openssl 0.9.5a

2000-08-16 Thread Lewis McCarthy
Hi, Evan Carew wrote re: MD4: Because if it is bundled into a standard package such as this you can ship source or executable code designed to link to it that will do things like crack open NT boxes that still use it. Recently, while at a major bank in the US Midwest, I had occasion to

Re: A -dn xxx flag for the req command?

2000-08-16 Thread Peter Sylvester
[EMAIL PROTECTED] wrote: Has anyone added a "-dn" flag to the req command? This would make it much easier to write scripts that generate lots of requests. (Okay, maybe not a lot easier, since I could set up a config file that pointed to the environment, and then set env-vars, but

Re: [PATCH] md4 for openssl 0.9.5a

2000-08-16 Thread Richard Levitte - VMS Whacker
From: Lewis McCarthy [EMAIL PROTECTED] lewis.mccarthy It sounds like you're talking about using MD4 as part lewis.mccarthy of something else, not as part of SSL or TLS. I see lewis.mccarthy OpenSSL as an SSL/TLS library, not as a generic crypto lewis.mccarthy library or a general purpose

Re: [PATCH] md4 for openssl 0.9.5a

2000-08-16 Thread assar
Richard Levitte - VMS Whacker [EMAIL PROTECTED] writes: From: Lewis McCarthy [EMAIL PROTECTED] lewis.mccarthy It sounds like you're talking about using MD4 as part lewis.mccarthy of something else, not as part of SSL or TLS. I see lewis.mccarthy OpenSSL as an SSL/TLS library, not as a generic

Re: [PATCH] md4 for openssl 0.9.5a

2000-08-16 Thread Dr S N Henson
Lewis McCarthy wrote: Hi, Evan Carew wrote re: MD4: Because if it is bundled into a standard package such as this you can ship source or executable code designed to link to it that will do things like crack open NT boxes that still use it. Recently, while at a major bank in the US

Re: [PATCH] md4 for openssl 0.9.5a

2000-08-16 Thread Rich Salz
I think many people actually see it as both SSL/TLS and generic crypto library. Yes. I would like to see such a generic crypto lib and for now OpenSSL is the only thing available. I prefer CDSA, which is why I like Intel's offer to integrate OpenSSL and CDSA... :) /r$

Re: [PATCH] md4 for openssl 0.9.5a

2000-08-16 Thread Jeffrey Altman
MD4 is used in Heimdal. I assume it's for backward compatibility (possibly with Kerberos4?) or simply to follow the specs, so I assume Assars reason to send the patch in is simply to make life easier. I saw no reason not to put it in, really. Assar, care to comment on that? I believe

Re: [PATCH] md4 for openssl 0.9.5a

2000-08-16 Thread Assar Westerlund
Jeffrey Altman [EMAIL PROTECTED] writes: I believe MD4 is necessary for compatibility with Windows 2000. Yes, but not only that. MD4 is also used in the des-cbc-md4 encryption method and the rsa-md4, and rsa-md4-des checksums. /assar

Re: [PATCH] md4 for openssl 0.9.5a

2000-08-16 Thread Denis Ducamp
On Mon, Aug 14, 2000 at 09:44:02AM +0200, Assar Westerlund wrote: For some odd reason, md4 is not included in openssl. Here's a patch that adds it, since it's quite similar to the already existing md5. Thanks :-))) As a lot of people I only use libcrypto in OpenSSL (in programs I write,

Re: entropy gathering on windows

2000-08-16 Thread Ben Laurie
Richard Levitte - VMS Whacker wrote: From: Ian Upright [EMAIL PROTECTED] ian-list What is the advantage of a named socket? Why not just use ian-list an ordinary TCP/IP socket? Port space. What random port do you want to allocate today? With named pipes, they are represented in form