Re: [openssl-dev] common factors in (p-1) and (q-1)

2015-08-03 Thread Kurt Roeckx
On Fri, Jul 31, 2015 at 02:36:03AM +, p...@securecottage.com wrote: I have looked at your latest source to see if you have a possible common factor for (p-1) and (q-1) in your RSA key generation code. I've seen various proposals heres to generate what might be stronger RSA keys. But 1

Re: [openssl-dev] common factors in (p-1) and (q-1)

2015-08-03 Thread Hilarie Orman
On Mon, 3 Aug 2015 at 14:09:33 + Viktor Dukhovni wrote: On Mon, Aug 03, 2015 at 12:07:18AM -0600, Hilarie Orman wrote: 1. Use strong primes as in Rivest/Silverman. Simply described, choose large primes r and s. Choose small factors i and j, gcd(i, j) = 1. Find p such

Re: [openssl-dev] We're working on license changes

2015-08-03 Thread Matt Caswell
On 03/08/15 22:51, Quanah Gibson-Mount wrote: It is curious as well that the openssl project did not solicit feedback from it's community before announcing said license change to see what the general consensus of the community is on the best path forward, and instead is moving towards a

Re: [openssl-dev] We're working on license changes

2015-08-03 Thread Quanah Gibson-Mount
--On Friday, July 31, 2015 3:19 PM -0400 Brian Smith br...@briansmith.org wrote: On Fri, Jul 31, 2015 at 12:29 PM, Hanno Böck ha...@hboeck.de wrote: Salz, Rich rs...@akamai.com wrote: In the spirit of making OpenSSL as useful as possible for everyone  I would consider a permissive

[openssl-dev] FW: Openssl 1.0.2c include the FIPS 140-2 Object Module

2015-08-03 Thread Patil, Ashwini IN BLR STS
Hello All, Following steps are done to check the FIPS feasibility . To check ASLR dependency the following link was referred. http://openssl.6102.n7.nabble.com/FIPS-Module-1-2-build-with-Visual-Studio-2010-fails-self-tests-td36372.html Linker properties were changed in visual studio 2008 for

Re: [openssl-dev] Compilation error while ignoring no-ssl2 no-ssl3

2015-08-03 Thread Kannan Narayanasamy -X (kannanar - HCL TECHNOLOGIES LIMITED at Cisco)
Hi Team, Any updates plz. Thanks, Kannan Narayanasamy. -Original Message- From: openssl-dev [mailto:openssl-dev-boun...@openssl.org] On Behalf Of Kannan Narayanasamy -X (kannanar - HCL TECHNOLOGIES LIMITED at Cisco) Sent: Friday, July 31, 2015 6:43 PM To: openssl-dev@openssl.org

Re: [openssl-dev] We're working on license changes

2015-08-03 Thread Jonathan Larmour
On 31/07/15 19:19, Brian Smith wrote: Also, I question the need for people to sign a CLA to contribute to OpenSSL. OpenSSL has been very successful for decades without a CLA requirement. Lots of other projects are extremely successful without a CLA. A CLA seems unnecessary. More

[openssl-dev] [openssl.org #3978] RE: Openssl 1.0.2c include the FIPS 140-2 Object Module

2015-08-03 Thread Patil, Ashwini IN BLR STS via RT
Hello All, Following steps are done to check the FIPS feasibility . To check ASLR dependency the following link was referred. http://openssl.6102.n7.nabble.com/FIPS-Module-1-2-build-with-Visual-Studio-2010-fails-self-tests-td36372.html Linker properties were changed in visual studio 2008 for

[openssl-dev] [openssl.org #3967] Assert hit in the latest 1.0.2d code

2015-08-03 Thread Matt Caswell via RT
On Mon Aug 03 01:55:07 2015, prav...@viptela.com wrote: Yes that worked. The previous version we were using 1.0.1m. Commit has been applied to git here: https://github.com/openssl/openssl/commit/9e43fe9a2bd38f06385b5b721f7c4b3ff0e4163f Closing ticket. Matt

Re: [openssl-dev] common factors in (p-1) and (q-1)

2015-08-03 Thread Hilarie Orman
Date: Mon, 3 Aug 2015 04:04:01 + From: Viktor Dukhovni openssl-us...@dukhovni.org On Sun, Aug 02, 2015 at 08:08:52PM -0600, Hilarie Orman wrote: For primes p and q for which p-1 and q-1 have no common factor = n, Other than 2 of course. Of course. probability of gcd(p, q) 1

[openssl-dev] [openssl.org #3977] bug report : Ubutu 12.0.4 : Openssl 1.0.1p : allowing connections with EXP cipher

2015-08-03 Thread sandeep umesh via RT
Hi, I updated openssl version to 1.0.1p (to address logjam) and configured sendmail. To verify the logjam fix, I used openssl s_client and connected to the smtp server. --- Default log: $ openssl s_client -starttls smtp -crlf -connect 127.0.0.1:25 -cipher EXP

Re: [openssl-dev] common factors in (p-1) and (q-1)

2015-08-03 Thread mancha
On Sun, Aug 02, 2015 at 12:59:49AM +, p...@securecottage.com wrote: I'd like to thank several people for looking into my assertion that it is possible for common factors in p-1 and q-1 to leak from the factorisation of n-1. Hi Paul. I came across a paper by Mckee and Pinch [1] you might

Re: [openssl-dev] common factors in (p-1) and (q-1)

2015-08-03 Thread mancha
On Sun, Aug 02, 2015 at 08:08:52PM -0600, Hilarie Orman wrote: For primes p and q for which p-1 and q-1 have no common factor = n, probability of gcd(p, q) 1 is very roughly 1/n. Hi There's a typo or two here. Assuming p!=q, we always have gcd(p,q)=1. Therefore, 1. Use strong primes as in

Re: [openssl-dev] common factors in (p-1) and (q-1)

2015-08-03 Thread Viktor Dukhovni
On Mon, Aug 03, 2015 at 12:07:18AM -0600, Hilarie Orman wrote: 1. Use strong primes as in Rivest/Silverman. Simply described, choose large primes r and s. Choose small factors i and j, gcd(i, j) = 1. Find p such that 1+2*i*r is prime and q such that 1+2*j*s is prime.

Re: [openssl-dev] [openssl.org #3977] bug report : Ubutu 12.0.4 : Openssl 1.0.1p : allowing connections with EXP cipher

2015-08-03 Thread Kurt Roeckx via RT
On Mon, Aug 03, 2015 at 12:03:26PM +, sandeep umesh via RT wrote: I was expecting that openssl will reject connection request with EXP cipher which is not happening as seen above. Could you please verify this? Thanks If you configure it to allow export ciphers or ALL, of course it's going