Re: EVP_verify APIs

2014-11-18 Thread Gayathri Manoj
Thanks All. Conclusion: RSA_public_decrypt/encrypt is not supported in FIPS mode. For making FIPS compliance I have to replace signing algorithm with EVP_sign*() and verification by EVP_verify*() Thanks, Gayathri On Thu, Nov 13, 2014 at 9:19 PM, Dr. Stephen Henson st...@openssl.org wrote:

ECC key generation example using openssl

2014-11-18 Thread Indtiny S
Dear All, I have written below code to generate a ECC based private and public key . But I am missing logic , my keys are not generated . My goal is to generate , Client :- private = Ca , public= Ca,G and Server:- private=Sa, pub = Sa.G and prove Ca.(Sa.G) = Sa.(CaG) #include

sign problem

2014-11-18 Thread Amir Reda
dear all i made an application a client server the client send a certificate request and server reply with the certificate and it creates a encrypted shared key and some data and sign the digest of the shared key and data my problem is 1- in SignDigest() in EVP_DigestSignFinal(mdctx, NULL,

RE: sign problem

2014-11-18 Thread Scott Neugroschl
That looks like a debugger message, not an actual error from the code. From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Amir Reda Sent: Tuesday, November 18, 2014 10:29 AM To: openssl-users@openssl.org Subject: sign problem dear all i made an

differing outputs using cli utility and c interface

2014-11-18 Thread Josh Marshall
I tried playing around with simple encryption using DES. I can't explain why the cli utility and the library interface seem to be producing different output. Detailed on Stackoverflow here:

Re: differing outputs using cli utility and c interface

2014-11-18 Thread Andrej Manduch
Hi Josh, With your openssl command you're useing DES in CBC mode however in you C code you're useing DES in CFB mode which are completly different. Don't feel bad about this. This is a quite common mistake which lot of newbie do. I don't want to explain how block cipher work, how to use them

Where to download OpenSSL FIPS v2.0.9

2014-11-18 Thread Rob Jerdonek
I see on the NIST website that OpenSSL FIPS module v2.0.9 is in the process of FIPS validation. Where can I download the latest v2.0.9 source code and the updated FIPS user guide. I would like to test with this new version. Thank you, Rob

Re: differing outputs using cli utility and c interface

2014-11-18 Thread Malatesh Ankasapur
Dear All, citrix reciever using the symbolic link .pem certificate so i did c_rehash for my ceritficate 1. openssl-0.9.8e created 1 hash value for my certificate. but i dont know why openssl-1.0.0 is creating 2 hash value suppose i am going to update openssl in my linux, its depends on the libc,

Re: sign problem

2014-11-18 Thread Niraj Sorathiya
Hello Everyone, Where we are executing these client.cc,server.cc,client.h,server.h,certificate.cpp files ? As i want to make my own Digital Certificate using my own algorithm i was not understanding where to execute these files. Thankyou. Regards, Niraj. On Wed, Nov 19, 2014 at 12:12 AM,

Re: sign problem

2014-11-18 Thread Amir Reda
sorry sir what do you mean by your question On Wed, Nov 19, 2014 at 9:02 AM, Niraj Sorathiya nirajsorathiya...@gmail.com wrote: Hello Everyone, Where we are executing these client.cc,server.cc,client.h,server.h,certificate.cpp files ? As i want to make my own Digital Certificate using my