Re: Support FFDHE?

2020-02-28 Thread Jakob Bohm via openssl-users
On 2020-02-28 03:37, Salz, Rich via openssl-users wrote: *>*Per section Supported Groups in RFC 8446 [1], FFDHE groups could be supported. I was wrong, sorry for the distraction. As others have pointed out, it will be in the next (3.0) release. Note that the group identifiers for the

Re: Stream Encription

2020-02-28 Thread Dmitry Belyavsky
Hello, If you mean encryption/decryption only, I strongly suppose you should look at EVP_CipherInit/Update/Final functions. On Fri, Feb 28, 2020 at 4:53 PM Илья Юркевич (Ilya Yurkevich) via openssl-users wrote: > Hello, > > I have a client, that sends me data, that I need to encrypt, in few

Stream Encription

2020-02-28 Thread Ilya Yurkevich
Hello, I have a client, that sends me data, that I need to encrypt, in few steps. I can use such functions in PKCS11: C_EncryptInit (...), C_EncryptUpdate (...), C_EncryptFinal (...). It allows me add data, that will be encrypted at every step, using C_EncryptUpdate  function.   In OpenSSL I

Re: aes_cbc_hmac_sha1 implementation

2020-02-28 Thread Phani 2004
OK. I understood that "AES-128-CBC-HMAC-SHA1"(aesni_cbc_hmac_sha1) always does mte. I am trying to implement engine implementation of combined mode cipher aes_cbc_hmac_sha1. So in my aes_cbc_hmac_sha1_cipher implementation should i do mte only? If hardware engine can do both operations in a