Re: about the sequence number field

2003-12-19 Thread Mohamad Badra
Dear, I have 2 questions about this sequence number in TLS: 1)What is the value of finished's sequence number? It is zero? 2) Is there any command line with OpenSSLto have the MAC? Thank you, -Bdr Swaminathan P wrote: Those were great replies. Thanks Lev and Geoff. Guess I'll have to put

Re: AES_CBC decryption

2003-12-19 Thread Stephen Sprunk
Thus spake mohanlal jangir [EMAIL PROTECTED] I was looking into the AES CBC code available at http://openbsd.secsup.org/src/lib/libssl/src/crypto/aes/ For testing this, I wrote small code (attached in mail). The Encryption seems OK but Decryption is failing. I think, I am doing some

Re: AES_CBC decryption

2003-12-19 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Fri, 19 Dec 2003 10:49:49 -0600, Stephen Sprunk [EMAIL PROTECTED] said: stephen Thus spake mohanlal jangir [EMAIL PROTECTED] stephen I was looking into the AES CBC code available at stephen http://openbsd.secsup.org/src/lib/libssl/src/crypto/aes/ stephen For

RE: AES_CBC decryption

2003-12-19 Thread Fernandes, James
You have to reinitialize the IV before decryption. Thanks, James -Original Message- From: mohanlal jangir [mailto:[EMAIL PROTECTED] Sent: Friday, December 19, 2003 6:45 AM To: [EMAIL PROTECTED] Subject: AES_CBC decryption Hi, I was looking into the AES CBC code available at

[openssl.org #743] Bug in AES_cbc_encrypt

2003-12-19 Thread Richard Levitte via RT
I was notified today of the existence of this ticket. My appologies for missing it. The patch included in this ticket was applied almost two months ago, so I'm resolving this ticket. [EMAIL PROTECTED] - Fri Oct 24 09:29:09 2003]: The function AES_cbc_encrypt has a bug when its input and

PEM manual page error

2003-12-19 Thread Lev Walkin
The PEM(3) manual page specifies a way to read a certificate in PEM format from a BIO: === cut === Although the PEM routines take several arguments in almost all applications most of them are set to 0 or NULL. Read a certificate in PEM format from a BIO: X509 *x;

EVP_CipherUpdate usage is incorrect in EVP_EncryptInit(3)

2003-12-19 Thread Lev Walkin
The manual page on EVP_EncryptInit contains the incorrect usage case for EVP_CipherUpdate. If EVP_CipherUpdate() fails, the caller is still supposed to invoke a EVP_CIPHER_CTX_cleanup() function. In this example taken from the manual page, the function just returns with 0 error code right when the