RE: ECIES for openssl

2010-08-01 Thread Ladar Levison
I have implemented ECIES (Elliptic Curve Integrated Encryption Scheme) for OpenSSL. The code include ASN.1 encoding compatible with SEC1: Elliptic Curve Cryptography version 2.0 (http://www.secg.org/download/aid-780/sec1-v2.pdf), X9.63 KDF, OpenSSL ERR mechanism. Hi Zhi, I'm

Code for using ECIES to protect data (ECC + AES + SHA)

2010-08-06 Thread Ladar Levison
(using equivalent curves/key sizes). I hereby place the attached code in the public domain. As such it comes without any warranty regarding its merchantability or fitness for a particular purpose. Please use it at your own risk. -- Ladar Levison Lavabit LLC http://lavabit.com /** * @file

Re: memory corruption after libssl is unloaded from memory

2010-08-13 Thread Ladar Levison
(*(ssl_locks + i)); } free(ssl_locks); ssl_locks = NULL; } return; } -- Ladar Levison Lavabit LLC http://lavabit.com /* * Demo for the SSL memory corruption bug. The problem is if libssl is * dlopen()ed, SSL error strings loaded, and the library is dlclose()d

Re: memory corruption after libssl is unloaded from memory

2010-08-16 Thread Ladar Levison
On 8/16/2010 8:11 AM, Jan Pechanec wrote: On Fri, 13 Aug 2010, Ladar Levison wrote: I was able to dynamically load OpenSSL, initialize it, unload it, and then reload it back up again using your example along with some of my cleanup code. Since I don't know your specific use case, I don't know

Re: [openssl.org #2596] report possible bug in 1.0.0e install.

2011-09-10 Thread Ladar Levison
On 9/10/2011 1:05 PM, Zaccone, Warren via RT wrote: Below are the results for the 1.0.0e build. It appears to be not be finding gcc as it attempts to use cc. Results? Could you send the output from config and make? __

Re: [openssl.org #2596] report possible bug in 1.0.0e install.

2011-09-14 Thread Ladar Levison
for the perl test logic; or possibly breaking perl completely; but without a Solaris box available I can't say for sure. You might want to start by removing lines 828, 829, and 930 from the config file and see if that fixes things. http://cvs.openssl.org/chngview?cn=21168 Ladar Levison

Re: [openssl.org #2603] 1.0.0e overwrites /dev/null

2011-09-18 Thread Ladar Levison
On 9/16/2011 9:08 AM, Jim Payne via RT wrote: Thanks for your quick reply… Yea…I know I could have run it as non-root but that is what I had done in the past upgrading openssl-and security makes me do it way too freqently…no it is not what I know I should have done (chalk it up to laziness on

Re: [openssl.org #2596] report possible bug in 1.0.0e install.

2011-09-19 Thread Ladar Levison
On Mon, 09/19/2011 11:32 AM, Zaccone, Warren wrote: deleting lines 828, 829, and 830 caused the config to complete successfully for 1.0.0e. Results below. However the make fails. I have copied the make results below. I will poke around a bit to determine why. I am sending this on, in

Re: s_client successful on port 443 but fails on port 5989

2011-09-19 Thread Ladar Levison
On Mon, 09/19/2011 11:26 PM, UserLP wrote: Hi, From a windows machine s_client is successful on port 443 but fails on port 5989 with 400 Bad Request and read:errno=0 The same works from another machine for the same target. The target machine is an ESXi. Request help to better understand the

Re: SSL server refusing connection : ECONNREFUSED

2011-11-16 Thread Ladar Levison
The book Network Security with OpenSSL has a several simple client/server examples you can look at. The examples are explained in the book, but you grab the code at: http://www.opensslbook.com/code.html and the tarball http://www.opensslbook.com/NSwO-1.3.tar.gz Ladar On 11/16/11 11:30

Re: OpenSSL kit

2011-11-17 Thread Ladar Levison
On 11/17/11 10:51 AM, Ben Laurie wrote: .\ssl\t1_enc.c(963): warning C4267: 'return' : conversion from 'size_t' to 'int', possible loss of data t1_lib.c .\ssl\t1_lib.c(301): warning C4244: '=' : conversion from '__int64' to 'long', possible loss of data We would like to know whether these

Re: OpenSSL kit

2011-11-25 Thread Ladar Levison
On 11/17/11 3:08 PM, Ben Laurie wrote: On Thu, Nov 17, 2011 at 1:01 PM, Ladar Levisonla...@lavabit.com wrote: On 11/17/11 10:51 AM, Ben Laurie wrote: .\ssl\t1_enc.c(963): warning C4267: 'return' : conversion from 'size_t' to 'int', possible loss of data t1_lib.c .\ssl\t1_lib.c(301): warning

Re: where can i find a open source implementation of threshold signatures

2011-11-25 Thread Ladar Levison
On 11/24/11 8:17 PM, Zhuang Yuyao wrote: hi, I am looking for a open source implementation of threshold signatures, by google, i found this site http://sarvjeet.com/projects.shtml, there is a project called Library for Threshold Signatures and it declares to be based on openssl and open source,

Re: Problem with EVP_EncryptUpdate/EVP_DecryptUpdate

2011-11-29 Thread Ladar Levison
Someone else might have a better answer, but I suspect your problem is that your calling Final after every Update, and/or the block size is wrong. I haven't worked with BF, but at least with AES, the modes dictates the proper input block size. The job of the Final function is to pad the

Re: OpenSSL - 64 bit

2011-12-21 Thread Ladar Levison
On Wed, 12/21/2011 3:56 AM, Naor, Lior wrote: 1.I'm working on Windows 7 - 64bit. Do you support this kind of platform? If so, where can I download the relevant files/dll? And how can I set it to the right configuration? There is no official binary release of OpenSSL. You can download the