Greetings!

The cipher algorithm GOST has a set of substitution blocks as parameters of
encryption/decryption. When we use the gost engine, we can specify the
preferred paramset via environment variable or using the default from
config file section.

In 2013 Russian official body has changed the default value of the blocks.
So we need to use old default value for the old systems and new - for new
ones. But the functions CMS_encrypt/PKCS7_encrypt now do not allow to
configure the used cipher. Using the environment variable for the
parameters management makes more difficult the writing and using
multi-threading applications.

Is it possible to modify the code of the OpenSSL for support of different
parameters? For example, to provide functions like
CMS_encrypt_ex/PKCS7_encrypt_ex with extra arguments. Or may be there is a
more simple way to get the result necessary for our purposes.

Thank you!


-- 
SY, Dmitry Belyavsky

Reply via email to