RE: IE can't process 1024 bits cert?

2000-09-17 Thread Ludovic FLAMENT

Hy,

>thanks a lot. but i'm still confused of the cipher strength and
>key length. i always think 40-bit should be the key length of
>symmetric cipher algorithm and 512-bit is the key length of
>asymmetric cipher algorithm.

It's just.

>40-bit data encryption aglorithm
>is always corresponding to 512-bit certificate,  and 128-bit
>to 1024/2048-bit. is that right?

No, the certificate is independent of the symetric key-length. You can have
a server with a 512 bits certificate which used 128 bits symetric-key, or a
server with a 2048 bits certificate which used 40 bits symetric-key. It's
just a question of configuration of the server and the version (support
crypto 128 bits or No).

--
Ludovic FLAMENT

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: IE can't process 1024 bits cert?

2000-09-17 Thread huangchenc


> 40-bit is the cipher strength.  The key length should be 512-bit.

> If you want IE to handle certificates with 1024-bit keys, you will need
to
> download the high encryption package (click on "update information" next
to
> cipher strength in that About dialog box).

thanks a lot. but i'm still confused of the cipher strength and
key length. i always think 40-bit should be the key length of
symmetric cipher algorithm and 512-bit is the key length of
asymmetric cipher algorithm. 40-bit data encryption aglorithm
is always corresponding to 512-bit certificate,  and 128-bit
to 1024/2048-bit. is that right?
thanks!!


__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: IE can't process 1024 bits cert?

2000-09-17 Thread Michael Lee

>> I think your IE does not have 1024-bit key. Please verify this by viewing
>> the Help->About dialog.
>
> thank you for your answer. I checked my IE version information, it only
> tell me like that:
> version: 5.00.2614.3500
> key length: 40-bit
>
> it doesn't show the key length of certificate. how can i know of that?
>
> appreciate for your help!

40-bit is the cipher strength.  The key length should be 512-bit.

If you want IE to handle certificates with 1024-bit keys, you will need to
download the high encryption package (click on "update information" next to
cipher strength in that About dialog box).


Regards,
Michael Lee

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: IE can't process 1024 bits cert?

2000-09-17 Thread huangchenc


> I think your IE does not have 1024-bit key. Please verify this by viewing
> the Help->About dialog.

thank you for your answer. I checked my IE version information, it only
tell me like that:
version: 5.00.2614.3500
key length: 40-bit

it doesn't show the key length of certificate. how can i know of that?

appreciate for your help!

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: IE can't process 1024 bits cert?

2000-09-17 Thread Fung

I think your IE does not have 1024-bit key. Please verify this by viewing
the Help->About dialog.

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]