Re: EVP DES, was: EVP_CipherInit() doesn't check for weak DES keys (0.9.6)

2002-04-04 Thread James Yonan
Out of 2^56 DES keys, there are four weak keys and 12 semi-weak keys. The odds of getting a weak key are incredibly slight. Most people don't bother to check, and it isn't considered a security risk. True, weak or semi-weak keys are improbable. I was thinking more about maintaining proper

[PATCH] Undefined identifiers in objects.txt

2002-04-04 Thread Svenning Sorensen
Hello, I was in for a surprise when I added some custom objects into objects.txt. Since I wanted to use our private enterprises OIDs, I used the form: enterprises 1527 1 : myobj : My Object (same form as the dcObject already in there) However, enterprises is undefined, so my

Re: VxWorks and OPEN SSL questions -

2002-04-04 Thread Bill Pringlemeir
Praveen Hi I am building an openssl image on to the Vxworks plaform. [snip] Praveen My Priority is reduce the image size , as this is very Praveen crtitical in RTOS. My Questions are : Crypto directory is This is more of an application question than development. The answer is quite

Re: [PATCH] Undefined identifiers in objects.txt

2002-04-04 Thread Lutz Jaenicke
On Thu, Apr 04, 2002 at 12:23:26PM +0200, Svenning Sorensen wrote: Since I wanted to use our private enterprises OIDs, I used the form: enterprises 1527 1: myobj : My Object (same form as the dcObject already in there) However, enterprises is undefined, so my object ended up

Re: [PATCH] Undefined identifiers in objects.txt

2002-04-04 Thread Richard Levitte - VMS Whacker
From: Svenning Sorensen [EMAIL PROTECTED] sss I was in for a surprise when I added some custom objects into objects.txt. sss sss Since I wanted to use our private enterprises OIDs, I used the form: sss sss enterprises 1527 1 : myobj : My Object sss sss (same form as the dcObject

Limiting key size

2002-04-04 Thread Baber Amin
Hi folks, how can one limit and enforce the the key size that can be generated and used by openSSL and related utilities. The enforcement has to happen on multiple levels, 1. At generation. 2. Loading keys into the context. I am presuming that the ciphers can be limited to a lower or higher

Blocking and non-blocking IO

2002-04-04 Thread Baber Amin
Folks, where can I get more info on blocking and non-blocking IO modes that openSSL operates in? Thanks Baber :) __ OpenSSL Project http://www.openssl.org Development Mailing List

Re: Limiting key size

2002-04-04 Thread Richard Koenning
At 11:54 04.04.2002 -0700, you wrote: Hi folks, how can one limit and enforce the the key size that can be generated and used by openSSL and related utilities. The enforcement has to happen on multiple levels, 1. At generation. See http://www.openssl.org/docs/apps/openssl.html 2. Loading

[no subject]

2002-04-04 Thread yves daignaux
Bonjour, I am trying to install Openssl on my computer: a fatal error return happens : making all in crypto/sha... cc -I.. -I../../include -DTHREADS -pthread -DDSO_DLFCN -DHAVE_DLFCN_H -std1 -tune host -fast -readonly_strings -c sha_dgst.c Fatal: Insufficient virtual memory to continue

Re: [PATCH] Undefined identifiers in objects.txt

2002-04-04 Thread Svenning Sorensen
At 20:40 04-04-2002, Richard Levitte - VMS Whacker wrote: To be perfectly honest, I think you're dong this the wrong way. I assume you're using the openssl command to do stuff, and in the case, the right thing is to have the desired extra OIDs in openssl.cnf. [snip] If you're building an

Name space collision

2002-04-04 Thread Steven Bade
We've created in the openCryptoki project a software token which uses openSSL's crypto routines... When running under the iplanet regression test suite we get a core dump in the key generation code... Tracing it down, the crash occurs in the SHA1_Update... one of the community

Looking for a current SSLWSock.zip

2002-04-04 Thread David Lyon
I'm looking for an old SSLWSock.zip file as shown here. I've tried google and altavista but all the links are long dead. Can anyone help me locate a url to this file? [ssl-users] SSL socket for Delphi 3 Jan Tomasek ([EMAIL PROTECTED]) Mon, 31 Aug 1998 20:28:17 +0200 a.. Messages sorted by: [

Re: Looking for a current SSLWSock.zip

2002-04-04 Thread Doug Kaufman
On Fri, 5 Apr 2002, David Lyon wrote: I'm looking for an old SSLWSock.zip file as shown here. I've tried google and altavista but all the links are long dead. Can anyone help me locate a url to this file? [ssl-users] SSL socket for Delphi 3 Jan Tomasek ([EMAIL PROTECTED]) Did you try Jan

Re: Looking for a current SSLWSock.zip

2002-04-04 Thread David Lyon
Thanks Doug, - Original Message - From: Doug Kaufman [EMAIL PROTECTED] To: David Lyon [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Friday, April 05, 2002 3:52 PM Subject: Re: Looking for a current SSLWSock.zip On Fri, 5 Apr 2002, David Lyon wrote: I'm looking for an old

Re: your mail

2002-04-04 Thread Erwann ABALEA
On Thu, 4 Apr 2002, yves daignaux wrote: a fatal error return happens : making all in crypto/sha... cc -I.. -I../../include -DTHREADS -pthread -DDSO_DLFCN -DHAVE_DLFCN_H -std1 -tune host -fast -readonly_strings -c sha_dgst.c Fatal: Insufficient virtual memory to continue compilation. I

Re: EVP DES, was: EVP_CipherInit() doesn't check for weak DES keys (0.9.6)

2002-04-04 Thread John Viega
On Thu, Apr 04, 2002 at 04:07:47AM -0700, James Yonan wrote: I was thinking more about maintaining proper key parity. Does a client of EVP need to worry about making sure that if DES is the underlying cipher, that passed keys have the proper parity? Generally, people just ignore the parity