Re: [openssl-users] Unable to decrypt CMS object encrypted with EC prime256v1 certificate

2016-07-07 Thread Stephan Mühlstrasser
Am 06.07.16 um 23:35 schrieb Dr. Stephen Henson: ... Yes, the other version cannot decrypt the CMS object generated by OpenSSL. I did some tests with Bouncy Castle, and it also cannot decrypt the CMS object. What might be interesting is that on the other hand Windows CryptoAPI is able to

Re: [openssl-users] Unable to decrypt CMS object encrypted with EC prime256v1 certificate

2016-07-07 Thread Stephan Mühlstrasser
Am 07.07.16 um 00:16 schrieb Dr. Stephen Henson: On Wed, Jul 06, 2016, Stephan M?hlstrasser wrote: While doing research on this, we found one thing that looks suspicious in the CMS objects generated by OpenSSL 1.0.2. When dumping the CMS object with dumpasn1, the key wrap algorithm is encoded

Re: [openssl-users] Unable to decrypt CMS object encrypted with EC prime256v1 certificate

2016-07-06 Thread Dr. Stephen Henson
On Wed, Jul 06, 2016, Stephan M?hlstrasser wrote: > Am 06.07.16 um 05:15 schrieb Dr. Stephen Henson: > >... > >>Is the CMS object broken, or is this a problem in OpenSSL? > >> > > > >Well the OpenSSL version does interop OK with the Bouncy Castle version of > >ECDH and CMS. I've checked through

Re: [openssl-users] Unable to decrypt CMS object encrypted with EC prime256v1 certificate

2016-07-06 Thread Stephan Mühlstrasser
Am 06.07.16 um 05:15 schrieb Dr. Stephen Henson: ... Is the CMS object broken, or is this a problem in OpenSSL? Well the OpenSSL version does interop OK with the Bouncy Castle version of ECDH and CMS. I've checked through your test message and the problem is that the AES unwrapping algorithm

Re: [openssl-users] Unable to decrypt CMS object encrypted with EC prime256v1 certificate

2016-07-05 Thread Dr. Stephen Henson
On Fri, Jul 01, 2016, Stephan M?hlstrasser wrote: > Hi, > > we are testing OpenSSL interoperability with a third-party > application, and we cannot decrypt a CMS object that is encrypted by > the third-party application with a prime256v1 elliptic-curve > certificate. > > I have attached the