Re: [openssl-users] DTLS Server with support for both EC and RSA keys

2017-02-06 Thread Matt Caswell
On 04/02/17 22:23, Suman Paul wrote: > Hi, > > I have a server that implements DTLS using OpenSSL 1.0.1 but supports > only RSA keys as of today. I want to add support to this server to > accept EC keys to be able to implement the newer ECDHE-ECDSA cipher > suites while retaining support for

Re: [openssl-users] Why do we try out all possible combinations of top bits in OpenSSL timing attack?

2017-02-06 Thread Michael Wojcik
[Snipped HTML content, since Outlook can't quote it properly and it was garbled anyway.] openssl-users doesn't really seem like the right place to discuss this (the sci.crypt newsgroup or a relevant area of the sprawling StackOverflow empire would be better), but it's a low-traffic list, so

Re: [openssl-users] Interoperating with a legacy client.

2017-02-06 Thread Matt Caswell
On 04/02/17 04:56, Tim Kirby wrote: > > I'm writing a server to support a legacy client that uses OpenSSL to > secure its communication. The client is using OpenSSL 1.0.1j, and I > have no control over that. I'm using the 1.0.1 version of OpenSSL > supplied with my > OS for the server side,

Re: [openssl-users] Why do we try out all possible combinations of top bits in OpenSSL timing attack?

2017-02-06 Thread Viktor Dukhovni
> On Feb 6, 2017, at 10:07 AM, Salz, Rich via openssl-users > wrote: > > Michael was kind to post some replies. > > I think a better forum to discuss this is one of the following, which has > more focus on cryptographic science and less on “how do I use the CLI” >

Re: [openssl-users] Why do we try out all possible combinations of top bits in OpenSSL timing attack?

2017-02-06 Thread Salz, Rich via openssl-users
Michael was kind to post some replies. I think a better forum to discuss this is one of the following, which has more focus on cryptographic science and less on “how do I use the CLI” http://www.metzdowd.com/mailman/listinfo/cryptography https://www.irtf.org/mailman/listinfo/cfrg --

[openssl-users] BN_MUL_MONT for ARM64 v8

2017-02-06 Thread Vijay Chander
Is big number montogomery multiplication as optimized as it can be for ARM64 as compared to X86-64 from the latest openssl github ? We are not seeing vmull ( or pmull/pmull2) instructions in armv8-mont.pl. On an ARM cortex-A72 (1GHz) and E5-2620 (2.1 Ghz) we are seeing an order of 10

Re: [openssl-users] Inserting cipher into speed.c

2017-02-06 Thread Benjamin Kaduk via openssl-users
On 02/04/2017 04:00 PM, Schmicker, Robert wrote: > > Hello, > > > Thanks to everyones help here I was able to insert a new cipher into > OpenSSL. > > However, for performance reasons I'd like to begin testing the speed > of my cipher and > > compare to other already implemented ciphers. > > > I

[openssl-users] How to disable the DTLS stuff in openssl 1.0.2k

2017-02-06 Thread Devang Kubavat
Hi, I am trying to configure the OpenSSL 1.0.2k for windows. Can anyone help me How to disable the DTLS? Best Regards, Devang -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users