Re: [openssl-dev] Reminder: OpenSSL's EC private key encoding is broken

2015-03-31 Thread Matt Caswell
On 25/03/15 23:40, Douglas E Engert wrote: > > The attached patch against https://github.com/openssl/openssl > makes sure the EC private key in an OCTETSTRING retains leading zeros > when converting from BIGNUM to OCTETSTRING. > Thanks for the patch. This has been applied. Matt _

Re: [openssl-dev] Reminder: OpenSSL's EC private key encoding is broken

2015-03-25 Thread Douglas E Engert
The attached patch against https://github.com/openssl/openssl makes sure the EC private key in an OCTETSTRING retains leading zeros when converting from BIGNUM to OCTETSTRING. http://www.secg.org/sec1-v2.pdf 2.3.7 Integer-to-Octet-String Conversion Says: "Output: An octet string M of leng

Re: [openssl-dev] Reminder: OpenSSL's EC private key encoding is broken

2015-03-25 Thread Annie
Am 24.03.2015 um 19:42 schrieb Douglas E Engert: > > On 3/24/2015 6:10 AM, Annie Yousar wrote: >> Dear all, >> this should not have happened: > > The private key may have leading zero bytes, and the size of the > BIGNUM is used > for the length of the octetstring rather then the field_len. > The le

Re: [openssl-dev] Reminder: OpenSSL's EC private key encoding is broken

2015-03-24 Thread Douglas E Engert
On 3/24/2015 6:10 AM, Annie Yousar wrote: Dear all, this should not have happened: The private key may have leading zero bytes, and the size of the BIGNUM is used for the length of the octetstring rather then the field_len. The length of the BIGNUM does not include any leading zeros. Try the

[openssl-dev] Reminder: OpenSSL's EC private key encoding is broken

2015-03-24 Thread Annie Yousar
Dear all, this should not have happened: $ for i in `seq 1 1000` ; do if [ "x`openssl ecparam -genkey -name prime256v1 -noout > key.pem; ls -l key.pem | sed '/ 227 /d'`" != " x" ]; then echo; cat key.pem;else echo -n "."; fi; done ..

A reminder : A Study on Free/Open Sourec Software

2007-03-13 Thread Anu Gupta DCSA
Dear OpenSSL Contributors, I seek help from designers, developers, testers,defect fixers,project managers or playing any other key role in Free/Open Source software development or maintenence in carrying out a study on practices and problems of defect management in various Free/Open Source Sof

Re: reminder

1999-03-24 Thread Bodo Moeller
[EMAIL PROTECTED] (Bodo Moeller): >> I [...] came across what appears to be a bug in the enc_read.c routine. >> I added a few lines of code so that it would work [...] > Was that really a bug? I would not think so, and certainly the > proposed fix is not correct (the recursive call to des_enc_r

Re: reminder

1999-03-20 Thread Bodo Moeller
> Please don't forget the enc_read.c bug fix. > From: Michael Rayment <[EMAIL PROTECTED]> > Subject: [ssl-bugs] Possible bug in crypto/des/enc_read.c > Date: Mon, 15 Feb 1999 00:45:01 -0330 > I am using enc_read.c and enc_write.c to easily read and write data into > and from an encrypted file.

reminder

1999-03-19 Thread gang cao
Please don't forget the enc_read.c bug fix. From: Michael Rayment <[EMAIL PROTECTED]> Subject: [ssl-bugs] Possible bug in crypto/des/enc_read.c Date: Mon, 15 Feb 1999 00:45:01 -0330 I am using enc_read.c and enc_write.c to easily read and write data into and from an encrypted file. I am readin

Re: reminder

1999-03-19 Thread Ben Laurie
Ulf Möller wrote: > > Please don't forget the enc_read.c bug fix. This appears to have already been fixed. Cheers, Ben. -- http://www.apache-ssl.org/ben.html "My grandfather once told me that there are two kinds of people: those who work and those who take the credit. He told me to try to be

reminder

1999-03-18 Thread Ulf Möller
Please don't forget the enc_read.c bug fix. From: Michael Rayment <[EMAIL PROTECTED]> Subject: [ssl-bugs] Possible bug in crypto/des/enc_read.c Date: Mon, 15 Feb 1999 00:45:01 -0330 I am using enc_read.c and enc_write.c to easily read and write data into and from an encrypted file. I am readin