RE: Data and Signature (envelope)

2013-04-26 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of redpath Sent: Thursday, 25 April, 2013 09:40 To: openssl-users@openssl.org Subject: Re: Data and Signature (envelope) I looked at the latest smsign.c shown below modified with a large data item. The result is still a detached and quite

Re: Data and Signature (envelope)

2013-04-25 Thread redpath
this message in context: http://openssl.6102.n7.nabble.com/Data-and-Signature-envelope-tp44885p44898.html Sent from the OpenSSL - User mailing list archive at Nabble.com. __ OpenSSL Project http

Re: Data and Signature (envelope)

2013-04-25 Thread redpath
://openssl.6102.n7.nabble.com/Data-and-Signature-envelope-tp44885p44901.html Sent from the OpenSSL - User mailing list archive at Nabble.com. __ OpenSSL Project http://www.openssl.org User Support

Re: Data and Signature (envelope)

2013-04-25 Thread Jakob Bohm
On 4/25/2013 1:13 PM, redpath wrote: I took the sign.c example and modified it slightly to use artifacts I have, but it seems the result just produces a PKCS7 that has a signature? I want to have the data (PDF or JPG) in there as I need to use it after validating that it is trusted. Basically I

Re: Data and Signature (envelope)

2013-04-25 Thread redpath
Exactly a non-detached, I see the constant detached and thought thats what it meant but that road lead nowhere, so if anyone has pointers how to make a non-detacched or modify below that would be great. -- View this message in context: http://openssl.6102.n7.nabble.com/Data-and-Signature

Re: Data and Signature (envelope)

2013-04-25 Thread Dr. Stephen Henson
On Thu, Apr 25, 2013, redpath wrote: I took the sign.c example and modified it slightly to use artifacts I have, but it seems the result just produces a PKCS7 that has a signature? I want to have the data (PDF or JPG) in there as I need to use it after validating that it is trusted.

Re: Data and Signature (envelope)

2013-04-25 Thread Dr. Stephen Henson
On Thu, Apr 25, 2013, Viktor Dukhovni wrote: On Wed, Apr 24, 2013 at 10:35:04PM -0400, Dave Thompson wrote: I am assuming RSA though I would like to do ECDSA. These APIs will use any privatekey for which a signature scheme is available; that's RSA DSA ECDSA (or pedantically EC;

Re: Data and Signature (envelope)

2013-04-25 Thread redpath
) BIO_free(out); if (tbio) BIO_free(tbio); return ret; } -- View this message in context: http://openssl.6102.n7.nabble.com/Data-and-Signature-envelope-tp44885p44912.html Sent from the OpenSSL - User mailing list archive at Nabble.com

Data and Signature (envelope)

2013-04-24 Thread redpath
and the signature and that would be? x.509 (that does not make sense or does it) pkcs12 (maybe) so what would it be? Of course I have to figure out how to extract the info out of the new envelope; any suggestions? -- View this message in context: http://openssl.6102.n7.nabble.com/Data-and-Signature

Re: Data and Signature (envelope)

2013-04-24 Thread Krzysztof Konopko
://www.ietf.org/rfc/rfc5652.txt https://en.wikipedia.org/wiki/Cryptographic_Message_Syntax https://www.openssl.org/docs/apps/openssl.html HTH, Kris -- View this message in context: http://openssl.6102.n7.nabble.com/Data-and-Signature-envelope-tp44885.html Sent from the OpenSSL - User mailing list

Re: Data and Signature (envelope)

2013-04-24 Thread redpath
data (JPG) derived MD from it for a signature and I have a private key. I am assuming RSA though I would like to do ECDSA. -- View this message in context: http://openssl.6102.n7.nabble.com/Data-and-Signature-envelope-tp44885p44889.html Sent from the OpenSSL - User mailing list archive

RE: Data and Signature (envelope)

2013-04-24 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of redpath Sent: Wednesday, 24 April, 2013 18:10 I saw the CMS but I did not see how to store raw data which I need to extract? Lets assume the data was a JPG and I created signature from the MD (SHA1) how can I get the JPG use it and

Re: Data and Signature (envelope)

2013-04-24 Thread Viktor Dukhovni
On Wed, Apr 24, 2013 at 10:35:04PM -0400, Dave Thompson wrote: I am assuming RSA though I would like to do ECDSA. These APIs will use any privatekey for which a signature scheme is available; that's RSA DSA ECDSA (or pedantically EC; openssl uses the same EC_KEY struct for ECDSA and