OpenSSL FIPS Capable and No Fingerprint

2013-06-25 Thread Jeffrey Walton
Hi All, When linking to the FIPS Capable shared object, the program fails its fingerprint check: $ arm-linux-androideabi-gcc --sysroot="$ANDROID_SYSROOT" -I/usr/local/ssl/android-14/include fips_hmac.c -o fips_hmac.exe /usr/local/ssl/android-14/lib/libcrypto.so.1.0.0 $ adb push /usr/local/ssl/and

RE: repost: OpenSSL 1.0.1E and FIPS 2.0.x?

2013-06-25 Thread mclellan, dave
Excellent. Thank you very much. very helpful and is exactly what we need to know. Dave +-+-+-+-+-+-+ Dave McLellan, Symmetrix Software Engineering EMC Corporation, 176 South St, Hopkinton MA Mail Stop 176-B1 1/P-36 office 508-249-1257, fax 508-497-8027 cell 978-500-2546 +-+-+-+-+-+-+ -

RE: Any issue in these instruction?

2013-06-25 Thread mehroz
Thankyou Dave Thompson for your detailed answer. Being new with openssl stuff, i have very little knowledge of what these instruction were actually doing. I have extracted set of these instruction from a script doing rsa with SHA1, and i wanted it to convert to ECC with SHA256 based encryption and

Need help in building OpenSSL on Win CE 6.0

2013-06-25 Thread Bankapur, Balaji (GE Healthcare)
Hello, I am trying to build OpenSSL for Win CE 6.0 on x86. Tried the following steps. Building wcecompat library --- 1. Downloaded wcecompat source from "https://github.com/mauricek/wcecompat/"; 2. Open Visual studio 2005 command prompt. 3.

Re: repost: OpenSSL 1.0.1E and FIPS 2.0.x?

2013-06-25 Thread Steve Marquess
On 06/25/2013 01:48 PM, mclellan, dave wrote: > Sorry for the re-post, I thought someone would have some > authoritative answer, opinion, or experience with this subject of > compatibility and FIPS approval status when upgrading... > > From: mclellan, dave Sent: Thursday, June 20, 2013 12:42 PM To

repost: OpenSSL 1.0.1E and FIPS 2.0.x?

2013-06-25 Thread mclellan, dave
Sorry for the re-post, I thought someone would have some authoritative answer, opinion, or experience with this subject of compatibility and FIPS approval status when upgrading... From: mclellan, dave Sent: Thursday, June 20, 2013 12:42 PM To: openssl-users@openssl.org Subject: OpenSSL 1.0.1E an

AW: Proplem with RSA_private_encrypt and OAEP

2013-06-25 Thread Robert Inzinger - SKIDATA
>> Hi >> >> I try to use RSA_private_encrypt and OAEP and always get the error at >> the call of RSA_private_encrypt : >> >RSA_private_encrypt() is used for signing data whereas OAEP is a padding mode >used for encryption. You'd need to use RSA_public_encrypt and >RSA_private_decrypt >instead.

Deadlock in FIPS mode

2013-06-25 Thread Fredrik Jansson
Hi! I have managed to deadlock OpenSSL while running in FIPS mode. The locking functions are setup according to mttest.c and th-lock.c using pthread_mutex_. Please note I have NOT explicitly set a thread id function. Then env is: openssl-1.0.1e openssl-fips-2.0.5 RHEL 6 - 32 bit. Please let me