Re: [PATCH] md4 for openssl 0.9.5a

2000-08-18 Thread Assar Westerlund
[ please include the CC:, I do not read [EMAIL PROTECTED] ] Does your md4 patch have been tested on 64 bits processors ? Yes, and it works fine. /assar __ OpenSSL Project http://www.openssl.org

Re: [PATCH] md4 for openssl 0.9.5a

2000-08-16 Thread Lewis McCarthy
Hi, Evan Carew wrote re: MD4: Because if it is bundled into a standard package such as this you can ship source or executable code designed to link to it that will do things like crack open NT boxes that still use it. Recently, while at a major bank in the US Midwest, I had occasion to

Re: [PATCH] md4 for openssl 0.9.5a

2000-08-16 Thread Richard Levitte - VMS Whacker
From: Lewis McCarthy [EMAIL PROTECTED] lewis.mccarthy It sounds like you're talking about using MD4 as part lewis.mccarthy of something else, not as part of SSL or TLS. I see lewis.mccarthy OpenSSL as an SSL/TLS library, not as a generic crypto lewis.mccarthy library or a general purpose

Re: [PATCH] md4 for openssl 0.9.5a

2000-08-16 Thread assar
Richard Levitte - VMS Whacker [EMAIL PROTECTED] writes: From: Lewis McCarthy [EMAIL PROTECTED] lewis.mccarthy It sounds like you're talking about using MD4 as part lewis.mccarthy of something else, not as part of SSL or TLS. I see lewis.mccarthy OpenSSL as an SSL/TLS library, not as a generic

Re: [PATCH] md4 for openssl 0.9.5a

2000-08-16 Thread Dr S N Henson
Lewis McCarthy wrote: Hi, Evan Carew wrote re: MD4: Because if it is bundled into a standard package such as this you can ship source or executable code designed to link to it that will do things like crack open NT boxes that still use it. Recently, while at a major bank in the US

Re: [PATCH] md4 for openssl 0.9.5a

2000-08-16 Thread Rich Salz
I think many people actually see it as both SSL/TLS and generic crypto library. Yes. I would like to see such a generic crypto lib and for now OpenSSL is the only thing available. I prefer CDSA, which is why I like Intel's offer to integrate OpenSSL and CDSA... :) /r$

Re: [PATCH] md4 for openssl 0.9.5a

2000-08-16 Thread Jeffrey Altman
MD4 is used in Heimdal. I assume it's for backward compatibility (possibly with Kerberos4?) or simply to follow the specs, so I assume Assars reason to send the patch in is simply to make life easier. I saw no reason not to put it in, really. Assar, care to comment on that? I believe

Re: [PATCH] md4 for openssl 0.9.5a

2000-08-16 Thread Assar Westerlund
Jeffrey Altman [EMAIL PROTECTED] writes: I believe MD4 is necessary for compatibility with Windows 2000. Yes, but not only that. MD4 is also used in the des-cbc-md4 encryption method and the rsa-md4, and rsa-md4-des checksums. /assar

Re: [PATCH] md4 for openssl 0.9.5a

2000-08-16 Thread Denis Ducamp
On Mon, Aug 14, 2000 at 09:44:02AM +0200, Assar Westerlund wrote: For some odd reason, md4 is not included in openssl. Here's a patch that adds it, since it's quite similar to the already existing md5. Thanks :-))) As a lot of people I only use libcrypto in OpenSSL (in programs I write,

Re: [PATCH] md4 for openssl 0.9.5a

2000-08-15 Thread Lewis McCarthy
Hi, Assar Westerlund wrote: For some odd reason, md4 is not included in openssl. Here's a patch that adds it, since it's quite similar to the already existing md5. Any questions? MD4 has had a pile of very successful cryptanalysis against it for some time now. The RSA Security Crypto FAQ

Re: [PATCH] md4 for openssl 0.9.5a

2000-08-15 Thread Evan Carew
Because if it is bundled into a standard package such as this you can ship source or executable code designed to link to it that will do things like crack open NT boxes that still use it. Recently, while at a major bank in the US Midwest, I had occasion to need a way to get into an NT domain as

[PATCH] md4 for openssl 0.9.5a

2000-08-14 Thread Assar Westerlund
For some odd reason, md4 is not included in openssl. Here's a patch that adds it, since it's quite similar to the already existing md5. Any questions? /assar diff --exclude=*~ -ruN openssl-0.9.5a.orig/Makefile openssl-0.9.5a/Makefile --- openssl-0.9.5a.orig/MakefileSat Apr 1

Re: [PATCH] md4 for openssl 0.9.5a

2000-08-14 Thread Richard Levitte - VMS Whacker
From: Assar Westerlund [EMAIL PROTECTED] assar For some odd reason, md4 is not included in openssl. Is MD4 part of any cipher suite used in SSL? If not, I think you have the odd reason :-). assar Here's a patch that adds it, since it's quite similar to the assar already existing md5. Just

Re: [PATCH] md4 for openssl 0.9.5a

2000-08-14 Thread Richard Levitte - VMS Whacker
From: Assar Westerlund [EMAIL PROTECTED] assar For some odd reason, md4 is not included in openssl. Here's a patch assar that adds it, since it's quite similar to the already existing md5. Commited. -- Richard Levitte \ Spannvägen 38, II \ [EMAIL PROTECTED] Chairman@Stacken \ S-168 35