Re: [openssl.org #3615] [PATCH] ChaCha20 with Poly1305 TLS Cipher Suites via the EVP interface

2014-12-04 Thread Andy Polyakov via RT
Hi, This patch is a contribution to OpenSSL. It includes efficient implementations of Dan Bernstein's Poly1305 (authenticator) and ChaCha20 (stream cipher). Incidentally I'm working on this too and already have ChaCha module. What I've learned is that ChaCha SIMD performance is a delicate

Re: [openssl.org #3607] nistz256 is broken.

2014-12-04 Thread Andy Polyakov via RT
Oops! Wrong patch! Correct one attached. If you feel like testing the wrong one, go ahead, but there are some later non-essential adjustments. diff --git a/crypto/ec/ecp_nistz256.c b/crypto/ec/ecp_nistz256.c index bf3fcc6..33b07ce 100644 --- a/crypto/ec/ecp_nistz256.c +++

Re: [PATCH] Add API to set minimum and maximum protocol version.

2014-12-04 Thread Tomas Hoger
On Wed, 3 Dec 2014 22:55:06 +0100 Kurt Roeckx wrote: This is an initial patch to support being able to set the minimum and maximum protocol version. The patch is currently untested, that will happen as I rewrite other things. But I'm looking for feedback. It seems *TLS*_VERSION constants

Re: [PATCH] Add API to set minimum and maximum protocol version.

2014-12-04 Thread Kurt Roeckx
On Thu, Dec 04, 2014 at 10:16:47AM +0100, Tomas Hoger wrote: On Wed, 3 Dec 2014 22:55:06 +0100 Kurt Roeckx wrote: This is an initial patch to support being able to set the minimum and maximum protocol version. The patch is currently untested, that will happen as I rewrite other things.

Re: [PATCH] Add API to set minimum and maximum protocol version.

2014-12-04 Thread Dr. Stephen Henson
On Thu, Dec 04, 2014, Tomas Hoger wrote: On Wed, 3 Dec 2014 22:55:06 +0100 Kurt Roeckx wrote: Maybe applications may benefit from an API where they can pass string set by the end user and let OpenSSL parse version number from that. If mod_ssl had configuration directives as SSLProtocolMin

link for binaries.html not working

2014-12-04 Thread Sunil Kerur
Dear Sir, I wanted to downloaded a binary from the follow link. https://www.openssl.org/related/binaries.html But it seems that it is not working. It displays Not Found The requested URL /related/binaries.html was not found on this server. Apache/2.2.22 (Ubuntu) Server at www.openssl.org Port

Re: [PATCH] Add API to set minimum and maximum protocol version.

2014-12-04 Thread Steffen Nurpmeso
Hello, Dr. Stephen Henson st...@openssl.org wrote: |On Thu, Dec 04, 2014, Tomas Hoger wrote: | On Wed, 3 Dec 2014 22:55:06 +0100 Kurt Roeckx wrote: | Maybe applications may benefit from an API where they can pass string | set by the end user and let OpenSSL parse version number from that. |

Re: link for binaries.html not working

2014-12-04 Thread Kurt Roeckx
On Thu, Dec 04, 2014 at 08:16:14AM +, Sunil Kerur wrote: Dear Sir, I wanted to downloaded a binary from the follow link. https://www.openssl.org/related/binaries.html Where did you find a link to that page? It has moved to: https://www.openssl.org/about/binaries.html Kurt

RE: link for binaries.html not working

2014-12-04 Thread Salz, Rich
The requested URL /related/binaries.html was not found on this server. The link moved. I added a rewrite to send you to the right place. It works now. -- Principal Security Engineer, Akamai Technologies IM: rs...@jabber.me Twitter: RichSalz

[openssl.org #3596] [1.0.2] -checkhost and -verify_hostname options documentation errors

2014-12-04 Thread Richard Levitte via RT
Ok, change applied, see commit 7005eda3b6e4858233ec3d2a95ff3f5f28f8a484 in the OpenSSL_1_0_2-stable branch. Thanks for the heads up! On Tue Nov 11 00:34:14 2014, hka...@redhat.com wrote: Current git OpenSSL_1_0_2-stable branch (39679d858) has errors related to hostname-, IP- and

TLS 1.2 Suite B ECDSA general availability

2014-12-04 Thread b_smith444
I apologize if this is not the right place to post this question but it seems like the best of the choices available to me. I am trying to understand when TLS 1.2 Suite B ECDSA will be generally available. I understand that this functionality currently exists in 1.0.2-beta3 however I have