Re: OCB Authenticated Encryption

2013-04-01 Thread Steve Marquess
On 03/28/2013 10:31 AM, Matt Caswell wrote: On 27 March 2013 21:03, Ben Laurie b...@links.org wrote: The OSF is not actually the one that would benefit from such a licence, so the whole idea that it (or we) should pay for one seems weird to me. Well, I wasn't actually suggesting that the OSF

Apache 2.2.24 doesnt come up with FIPS capable openssl 1.0.1c

2013-04-01 Thread Cipher
Hi All, I installed openssl 1.0.1c with FIPS and it works fine. export OPENSSL_FIPS=1 [root@PC ~]# openssl SHA1 incore SHA1(incore)= b5acba7f6333aafdfe9804d2aebe373c39024bc3 [root@PC ~]# openssl md5 incore Error setting digest md5 139723413960360:error:060A80A3:digital envelope

Re: [openssl.org #3022] Binary curves broken in FIPS mode

2013-04-01 Thread Matt Caswell
Any thoughts on this issue? As things currently stand binary curves are pretty much unusable in a FIPS capable OpenSSL build. Thanks Matt On 22 March 2013 19:41, Matt Caswell via RT r...@openssl.org wrote: Hello When using OpenSSL-1.0.1e-fips a call to PEM_write_bio_PrivateKey silently

[openssl.org #3022] Binary curves broken in FIPS mode

2013-04-01 Thread Stephen Henson via RT
On Fri Mar 22 20:41:21 2013, fr...@baggins.org wrote: Hello When using OpenSSL-1.0.1e-fips a call to PEM_write_bio_PrivateKey silently fails and produces a corrupt pem file when using an EVP_PKEY_EC key and a binary curve. The same function works fine when not using a FIPS capable OpenSSL. I

Re: Apache 2.2.24 doesnt come up with FIPS capable openssl 1.0.1c

2013-04-01 Thread k...@bitzermobile.com
You have to statically link the openssl dynamic libraries -- View this message in context: http://openssl.6102.n7.nabble.com/Apache-2-2-24-doesnt-come-up-with-FIPS-capable-openssl-1-0-1c-tp44630p44634.html Sent from the OpenSSL - Dev mailing list archive at Nabble.com.