RE: Command-line file encryption

2006-08-24 Thread Marek Marcola
Hello, Ok, it looks like these values are computed from the password... Is the algorithm for computing the key and IV from the password published ? PBKDF2 from PKCS#5 realized by EVP_BytesToKey() in OpenSSL. I don't remember exactly but there was some incompatibility with this standard ...

Re: OpenSSL, Apache 2 and RSA key sizes

2006-08-24 Thread Bernhard Froehlich
Charlie Lenahan wrote: George Adams wrote: [...] 2) Related to that, should I be worried that I'm generating a public/private keypair for my Apache2/mod_ssl server that's only 1024-bits? Do I even have the OPTION of having a larger/stronger key, or am I going to hit some weird compatibility

Re: large data read error

2006-08-24 Thread Krishna M Singh
Hi Sendil I am not sure but I haven't seen any such limit of 5K in my usage of the OpenSSL.. OpenSSL record size is around 16K i remember. Can problem be with ur server of client code (not OpenSSL) where some buffer size is hardcoded to 5K and than return values are nto approapriately handled.

Re: Wrapping SSL_read/SSL_write so they behave like read/write.

2006-08-24 Thread Krishna M Singh
David can't understand Incorrect. The 'SSL_write' function is the function to send unencrypted data over the SSL link. It has nothing to do with the encrypted data the SSL engine wants to write to the socket. When we do SSL_write the i/p is unencrypted data and this gets send over the SSL

RE: Wrapping SSL_read/SSL_write so they behave like read/write.

2006-08-24 Thread David Schwartz
David can't understand Incorrect. The 'SSL_write' function is the function to send unencrypted data over the SSL link. It has nothing to do with the encrypted data the SSL engine wants to write to the socket. When we do SSL_write the i/p is unencrypted data and this gets send over the

[NEWBIE] trying to convert DER file to PEM one

2006-08-24 Thread tizon
Dear OpenSLL users, first of all, let me point out that I'm a total newbie in the area of encryption. So maybe, my question could sound stupid ... I'm using OpenSSL 0.9.8a-7build1 on Kubuntu Dapper. And i just would like to create a PEM certificat file with two DER encrypted file(i need to do

Re: [NEWBIE] trying to convert DER file to PEM one

2006-08-24 Thread Bernhard Froehlich
tizon wrote: Dear OpenSLL users, first of all, let me point out that I'm a total newbie in the area of encryption. So maybe, my question could sound stupid ... I'm using OpenSSL 0.9.8a-7build1 on Kubuntu Dapper. And i just would like to create a PEM certificat file with two DER encrypted

How to use Open SSL Toolkit

2006-08-24 Thread Fatima Corona
I am new to OpenSSL and I needed information on how to begin using the toolkit. I need to programmatically create a certificate which I can then use to encrypt using SSL. Thank you for your help. __ OpenSSL Project

Re: How to use Open SSL Toolkit

2006-08-24 Thread Oily Pakora
Your best bet would be to Google for OpenSSL and "sample code". Also check out the OpenSSL book published by O'Reilly.Fatima Corona [EMAIL PROTECTED] wrote: I am new to OpenSSL and I needed information on how to begin using thetoolkit. I need to programmatically create a certificate which I can

Re: How to use Open SSL Toolkit

2006-08-24 Thread Rush Manbert
Fatima Corona wrote: I am new to OpenSSL and I needed information on how to begin using the toolkit. I need to programmatically create a certificate which I can then use to encrypt using SSL. Have you tried googling for openssl tutorial?

RE: Command-line file encryption

2006-08-24 Thread Randy Turner
Thanks for the reply. So what you are saying is that if I encrypt a file with a password according to my interpretation of PKCS#5/PBKDF2, then it might not decrypt properly (with the same password) using the command-line openssl function? R. -Original Message- From: [EMAIL PROTECTED]

BIO Filters

2006-08-24 Thread Christopher Johnson
All - I'm a little confused with the following example while working with BIO's. I'm trying base 64 encode a buffer using BIO_f_base64 with the following example. char *message = Hello World; b64 = BIO_new( BIO_f_base64( ) ); bio = BIO_new_fp( stdout, BIO_NOCLOSE ); bio

Blowfish encrypt and decrypt

2006-08-24 Thread Andreas von Linden
Hello, i have a problem with the Blowfish algorithm. When i encrypt a long message i get the following error when i try to decrypt the message: 4156:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:.\crypto\evp\evp_enc.c:454: The message length is form 10 to 450 (or