I am using EVP_Open, EVP_Seal to exchange information in several iterations, i.e open message 1, seal response 1, open message 2, seal response 2 using the same keys, etc (same EVP_CIPHER_CTX). I can do EVP_OpenInit, OpenUpdate,OpenFinal followed EVP_SealUpdate, EVP_SealFinal which works fine, but EVP_OpenUpdate,OpenFinal on the next message fails because the ctx->encrypt flag is set to 1 by SealFinal. Setting ctx->encrypt to 0 (decrypt) before doing OpenUpdate makes it all work nicely; I can also do EVP_EncryptInit(ctx, NULL,NULL,NULL,0) which works fine. So I thought to be safe I had better do EVP_EncryptInit(....,1) before the SealUpdate but it doesn't like that at all! Is the code set to do one Open/Seal pair automatically (looks like it)? Or did I just get lucky the first time? Is the response to a response regarded as illegal (works in RSA ref)? Is there a bug in here somewhere? Chris Brook
______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]