Re: EC curve preferences

2020-11-20 Thread Viktor Dukhovni
On Fri, Nov 20, 2020 at 08:43:59AM -0800, Skip Carter wrote: > I am sure this in the documentation somewhere; but where ? > > What are the preferred ECDH curves for a given keysize ? Which curves > are considered obsolete/deprecated/untrustworthy ? Is this a general question about industry

Re: EC curve preferences

2020-11-20 Thread Blumenthal, Uri - 0553 - MITLL
Those "rigid curves" that will be used in the future - future how distant, and for how long? Regards, Uri > On Nov 20, 2020, at 13:54, Phillip Hallam-Baker wrote: > smime.p7s Description: S/MIME cryptographic signature

Re: EC curve preferences

2020-11-20 Thread Phillip Hallam-Baker
There are currently two sets of preferred curves. CABForum approved use of the NIST curves from Suite B at 384 bits (and 521??) several years ago. Those are currently the only curves for which FIPS-140 certified HSMs are currently available and thus the only ones that can be supported by WebPKI

RE: EC curve preferences

2020-11-20 Thread Michael Wojcik
> From: openssl-users On Behalf Of Skip > Carter > Sent: Friday, 20 November, 2020 09:44 > > What are the preferred ECDH curves for a given keysize ? Which curves > are considered obsolete/deprecated/untrustworthy ? For TLSv1.3, this is easy. RFC 8446 B.3.1.4 only allows the following:

EC curve preferences

2020-11-20 Thread Skip Carter
I am sure this in the documentation somewhere; but where ? What are the preferred ECDH curves for a given keysize ? Which curves are considered obsolete/deprecated/untrustworthy ? -- Dr Everett (Skip) Carter  0xF29BF36844FB7922 s...@taygeta.com Taygeta Scientific Inc 607 Charles Ave Seaside

Re: set/get utilities are not available to access variable 'num' of structure bio_st

2020-11-20 Thread Matt Caswell
On 20/11/2020 13:46, Narayana, Sunil Kumar wrote: > Hi , > >     We are porting our Application from  openssl 1.0.1 to > openssl 3.0. In related to this activity we require to access the > variable ‘*num*’ of structure *bio_st. * > > In older versions the variable was accessed to

set/get utilities are not available to access variable 'num' of structure bio_st

2020-11-20 Thread Narayana, Sunil Kumar
Hi , We are porting our Application from openssl 1.0.1 to openssl 3.0. In related to this activity we require to access the variable 'num' of structure bio_st. In older versions the variable was accessed to set and get value using pointer operator (bi->num ). Since this is not