Re: Cipher Negotiation

2006-06-30 Thread Bodo Moeller
On Fri, Jun 30, 2006 at 09:41:08AM -0700, Chris Clark wrote: >> It's not a bug that AES182 is classified as "HIGH", although it is a >> missing feature that there is no class that encompasses only the >> 256-bit ciphers. That's why there now is "@STRENGTH", which does >> not add any ciphers and j

script no longer working

2006-06-30 Thread george r smith
All,   I am using this script on an AIX box and until an upgrade it worked just fine. Now the encryption and decryption is failing with the block size error. When I look at the encoded encrypted packet it looks like it is on multiple lines as it was before I added the –A parameter.   I

Re: Cipher Negotiation

2006-06-30 Thread Chris Clark
It's not a bug that AES182 is classified as "HIGH", although it is a missing feature that there is no class that encompasses only the 256-bit ciphers. That's why there now is "@STRENGTH", which does not add any ciphers and just sorts the one enabled so far. I assume "AES182" is a typo for AES12

Re: Cipher Negotiation

2006-06-30 Thread Chris Clark
> The problem is I can't find a way of selecting the order in which I > want the cipher negotiated. For example if all ciphers are enabled in > the configuration, I would perfer if AES is selected during > negoitation. What real problem is this intended to solve? Because AES is faster then othe

RE: Private Key Type and PEM Length

2006-06-30 Thread Marek Marcola
Hello, > I am working on something similar. if I generated a private key with no > password, > can I pass NULL to PEM_read_bio_privateKey(bio,&pkey,NULL,NULL)? Yes, > Is there lib function that reads DER format? Try d2i_RSAPrivateKey_bio(); Best regards, -- Marek Marcola <[EMAIL PROTECTED]> _

RE: Private Key Type and PEM Length

2006-06-30 Thread Wu, Sonia X (Sonia)
I am working on something similar. if I generated a private key with no password, can I pass NULL to PEM_read_bio_privateKey(bio,&pkey,NULL,NULL)? Is there lib function that reads DER format? Sonia -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Marek Marc

OpenSSL for uClinux on ARM7tdmi

2006-06-30 Thread Colin Moriarty
Hello,I am trying to compile OpenSSl for uClinux on an ARM7tdmi platform. After browsing this and other forums I found this tutorial.. http://www.ucdot.org/article.pl?sid=03/10/23/2249235&mode=thread>uCdot OpenSSL Tutorial My question is, are these patches and instructions only for Coldfire pl

Re: Cipher Negotiation

2006-06-30 Thread Bodo Moeller
On Fri, Jun 30, 2006 at 07:29:04AM -0400, Victor Duchovni wrote: >>> Currently I specify the group (HIGH/MEDIUM/LOW) and remove some ciphers >>> from a group (IDEA and ADH). I also remove AES at the beginning (Shif >>> +="-AES:") and add it later because if I don't remove AES there is no >>> way t

Re: Cipher Negotiation

2006-06-30 Thread Victor Duchovni
On Fri, Jun 30, 2006 at 07:19:39AM -0400, Victor Duchovni wrote: > On Thu, Jun 29, 2006 at 12:28:44PM -0700, Chris Clark wrote: > > > I have written a client program in which I allow the user to configure > > which cipher groups they want to allow as well as a cipher strength of > > low, medium,

Re: Cipher Negotiation

2006-06-30 Thread Victor Duchovni
On Thu, Jun 29, 2006 at 12:28:44PM -0700, Chris Clark wrote: > I have written a client program in which I allow the user to configure > which cipher groups they want to allow as well as a cipher strength of > low, medium, or high. > > The problem is I can't find a way of selecting the order in wh