Re: PKCS#11 wrapper around OpenSSL

2007-11-20 Thread Steven Bade
Victor B. Wagner wrote: On 2007.11.19 at 14:51:16 -0600, Steven Bade wrote: OpenCryptoki's Soft token based on openssl, was never intended to be a FIPS capable function, its simply intended to be an example for those who might wish to a) test PKCS#11 applications without having to have

Re: PKCS#11 wrapper around OpenSSL

2007-11-19 Thread Steven Bade
OpenCryptoki's Soft token based on openssl, was never intended to be a FIPS capable function, its simply intended to be an example for those who might wish to a) test PKCS#11 applications without having to have a card b) implement a token for an accelerator, other examples in opencryptoki are

Re: PKCS#11 wrapper around OpenSSL

2007-11-19 Thread Steven Bade
I believe that Sun contributed a pretty robust PKCS#11 engine for openSSL. Soft token exists in opencryptoki today, if i ever find time, I will be porting this to OSX Alon Bar-Lev wrote: On Nov 6, 2007 11:07 AM, Victor B. Wagner [EMAIL PROTECTED] wrote: I was asked by one user if we are

Re: patent risk in encryption algotithm ?

2003-09-26 Thread Steven Bade
DSA is unencumbered... I'm not sure about CAST On Thu, 2003-09-25 at 23:43, Boehme, Alfred wrote: Hello, I've been asked, if there is any known patent risk in the encryption algorithm of OpenSSL ? Especially DSA, CAST-128, and CAST-256 was asked for. Can someone help me here ?

Re: PKCS#11 engines revisited

2002-09-10 Thread Steven Bade
__ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] -- --- Steven Bade Senior Software Engineer IBM Linux Technology Center [EMAIL PROTECTED

Re: Update: Bull TrustWay PKCS#11 engine

2002-07-10 Thread Steven Bade
The 64$ question from my mind is are you working on a 0.9.7 engine for PKCS#11... That's the one of particular interest to me in the long run. afchine madjlessi wrote: You can find here the last updates for Trustway PKCS#11 engine. ChangeLog: - patch update for openssl-engine-0.9.6d -

Re: [openssl.org #11] Fw: trustway pkcs11 engine for openssl

2002-05-30 Thread Steven Bade
I'm not sure about the second question, but we found that the eracom engine submission was much more generic. When one of my co-workers tried to get our PKCS#11 libraries (openCryptoki) used by the Trustway module there were many issues, as well as specific calls directly to PKCs#11

Re: Name space collision

2002-04-06 Thread Steven Bade
thanks for taking the patch into consideration... When I get back to work I'll see if i can;t find the AIX Linker options and pass them on... Richard Levitte - VMS Whacker wrote: From: Steven Bade [EMAIL PROTECTED] sbade It seems that building with -Wl,-Bsymbolic on the linker options

Re: Name space collision

2002-04-05 Thread Steven Bade
,-Bsymbolic. Which I;m trying in the openSSL 0.9.6c build now Tom Wu wrote: Steven Bade wrote: We've created in the openCryptoki project a software token which uses openSSL's crypto routines... When running under the iplanet regression test suite we get a core dump in the key

Re: Name space collision

2002-04-05 Thread Steven Bade
Here is a patch I created for the Makefile.org file to correct the problem we were having... Steven Bade wrote: It seems that building with -Wl,-Bsymbolic on the linker options for creating the libcrypto.so makes this issue go away... Tom Wu wrote: Steven Bade wrote: We've

Name space collision

2002-04-04 Thread Steven Bade
We've created in the openCryptoki project a software token which uses openSSL's crypto routines... When running under the iplanet regression test suite we get a core dump in the key generation code... Tracing it down, the crash occurs in the SHA1_Update... one of the community

Re: Adding a new hardware accelerator

2002-01-09 Thread Steven Bade
Christian... You might want to look at participating in our openCryptoki project rather than create a PKCS#11 implementation from scratch. If you go to http://www-124.ibm.com/developerworks/projects/openCryptoki/ you can get some information, or you can email me and I'll try and answer what