Re: Vuln in SSL 3.0

2014-10-15 Thread nicolas . kox
Hi, there's a workaround here : https://tools.ietf.org/html/draft-ietf-tls-downgrade-scsv-00 it aims to forbid protocol downgrade, except for interoperability however I don't know when draft will be accepted and included to TLS protocols Nicolas - Mail original - De: Dominyk Tiller

Re : Re: [openssl.org #3442] [patch] AES XTS: supporting custom iv from openssl enc command

2014-07-11 Thread nicolas . kox
Hi and sorry to interfere, I had to review all ciphers available in openssl, and what seemed weird to me is that algorithms are always given as a combination of a symmetric cipher and a mode of operation This approach was convenient since stream ciphers and block cipher with a mode of

Re : Re: open ssl rsa key generation improvement idea Prime generation

2014-05-28 Thread nicolas . kox
Hi, it seems that the two discussions are somehow related the idea of generating only prime candidates not dividible by small primes is interesting but, due to incremental search, it will not apply to next candidates however, it may be possible to use bit counting to perform a less biased walk

Re : Re: Re : Re: open ssl rsa key generation improvement idea Prime generation

2014-05-28 Thread nicolas . kox
Actually, I was proposing another way to perform incremental search using divisibility properties The fact is I agree with your b) point, I was trying to explain a way to do it sorry if I didn't make myself clear there are two main points : - incremental search can be improved by testing less