RE: EVP and Elliptic curve

2013-03-22 Thread Leon Brits
The patch works. I am using the openssl-fips-2.0.2 sources. Here is a Kolbitz-409 curve private key: -BEGIN PRIVATE KEY- MIIBiwIBADCB2QYHKoZIzj0CATCBzQIBATAdBgcqhkjOPQECMBICAgGZBgkqhkjO PQECAwICAVcwBgQBAAQBAQRpBABg8F9lj0nBrTqxiQ9xhCEO/QmH4wfITCesz7j5

Re: CPU Software Engine

2013-03-22 Thread Jan Just Keijser
Hi Costas, Costas Stasimos wrote: Hello! I'm currently using the cryptodev framework-engine with openssl-1.0.1e. By run the command # openssl engine -t (cryptodev) cryptodev engine [ available ] (dynamic) Dynamic engine loading support [ unavailable ] we can see that the cryptodev

[openssl.org #3021] [PATCH] Fast implementation of AES-CTR mode for AVX capable x86-64 processors

2013-03-22 Thread Gueron, Shay via RT
Hello all - This patch is a contribution to OpenSSL. It offers an efficient implementation of AES-CTR, using Intel's AES-NI and AVX architecture. This contribution also improves the performance of AES-GCM. While faster AES-GCM can be achieved by interleaving the CTR and GHASH, we understand

[openssl.org #3022] Binary curves broken in FIPS mode

2013-03-22 Thread Matt Caswell via RT
Hello When using OpenSSL-1.0.1e-fips a call to PEM_write_bio_PrivateKey silently fails and produces a corrupt pem file when using an EVP_PKEY_EC key and a binary curve. The same function works fine when not using a FIPS capable OpenSSL. I suspect the same problem will affect any ASN.1 routines

[openssl.org #3023] [Patch] Remove redundant logical expressions

2013-03-22 Thread Hans Wennborg via RT
Hi all, While experimenting with a compiler warning, I found some redundant logical expressions in OpenSSL. I've attached a patch that removes them. Please let me know what you think. Thanks, Hans remove_redundant_logical_exprs.patch Description: Binary data