Re: Examples of blowfish.h code for C?

2007-11-03 Thread Brad Hards
On Friday 02 November 2007 12:13, Joel Christner wrote: Please pardon the newbie question. I was curious if anyone had any links or references that they could point me to for more details on how to use blowfish.h with C? I've gone through the man pages but was hoping for something more

Re: Error while encryption or Decrypting

2007-07-29 Thread Brad Hards
On Saturday 28 July 2007 01:49, Pink Princess wrote: *** glibc detected *** /home/noura/workspace/256OpenSSL/apps/openssl: double free or corruption (!prev): 0x0820d170 *** This is the most likely problem - you are free()ing memory that has already been free()d. Maybe you are free()ing memory

Re: api for RSA

2006-05-15 Thread Brad Hards
On Monday 15 May 2006 17:44 pm, you wrote: Hi all, I have a quick question. Suppose i am doing RSA crypto. I cant seem to figure out how i can choose a particular private key/public key. The only api that seems to be provided is rsa_generate_key and the man page says use the given api to

Re: How to distinguish between RSA and DSA keys in certificates?

2006-05-14 Thread Brad Hards
On Sunday 14 May 2006 18:54 pm, sefi wrote: If anyone knows a way how to load a certificate from a file and obtain it's X509* I would be glad. PEM_read_bio_X509() Brad pgp9HIS1bW880.pgp Description: PGP signature

Re: OCSP

2006-05-11 Thread Brad Hards
On Thursday 11 May 2006 23:38 pm, John Pattern wrote: I want to generate a simple OCSP request. What are the steps I must follow using OpenSSL? Thank you for your help. There is an openssl tool to do so - see: http://www.openssl.org/docs/apps/ocsp.html There is some detail, and a test server at

Re: Phantom Domain Name Mismatch?

2006-04-21 Thread Brad Hards
On Friday 21 April 2006 06:23 am, Fran Fabrizio wrote: You have attempted to establish a connection to imap.cis.uab.edu.   However, the security certificate presented belongs to imap.cis.uab.edu. Is that exactly how it is written? If so, you might have signed the certificate with a FQDN (ending

Re: Using MD5 in FIPS OpenSSL for RADIUS support

2006-04-16 Thread Brad Hards
On Sunday 16 April 2006 22:28 pm, Hagai Yaffe wrote: I am using OpenSSL version 0.9.7d for cryptographic needs of my application, among other uses I am using MD5 to implement RADIUS client. I would like to use the FIPS compliant version of OpenSSL but MD5 is not one of the certified

PKCS7_verify() with zero length input

2006-04-13 Thread Brad Hards
I'm trying to do detached CMS signatures and verification using the PKCS7_sign() and PKCS7_verify() functions. It appears to work OK, except that my test case for a zero length array fails to verify() - looks like the signature is OK though. The documentation suggests that PKCS7_verify() isn't

Re: PKCS7_verify() with zero length input

2006-04-13 Thread Brad Hards
On Thursday 13 April 2006 22:26 pm, Dr. Stephen Henson wrote: On Thu, Apr 13, 2006, Brad Hards wrote: I'm trying to do detached CMS signatures and verification using the PKCS7_sign() and PKCS7_verify() functions. It appears to work OK, except that my test case for a zero length array fails

PKITS test?

2006-02-03 Thread Brad Hards
Has anyone tried the PKITS suite: http://csrc.nist.gov/pki/testing/x509paths.html against OpenSSL? I'm planning to use some of those tests, and it would help if I knew what tests are known to fail. Brad pgpnrbtMc9Fjw.pgp Description: PGP signature

Weird indenting in X509_signature_print()

2006-02-02 Thread Brad Hards
In openssl-0.9.7g/crypto/asn1/t_509.c, there is this function: int X509_signature_print(BIO *bp, X509_ALGOR *sigalg, ASN1_STRING *sig) { unsigned char *s; int i, n; if (BIO_puts(bp,Signature Algorithm: ) = 0) return 0; if (i2a_ASN1_OBJECT(bp, sigalg-algorithm)

Determining key size for DSA and DH?

2005-06-05 Thread Brad Hards
I'm trying to determine the length (in bits) for my DSA and DH keys. I'm happily using RSA_size() for RSA keys, and I assumed that DSA_size and DH_size would do equivalent operations (based on the man page for BN_size_bits, which states 'If you want to know the key size of such a key, either

Re: valgrind errors

2005-06-05 Thread Brad Hards
On Wed, 1 Jun 2005 23:31 pm, [EMAIL PROTECTED] wrote: Hello all, I develeopped a server which seems to work quite fine. When I use Valgrind to check for problems, it returns me thousands of problems wich seems to be caused by the OpenSSL librairie! follows some of the returns: There is no

Re: Determining key size for DSA and DH?

2005-06-05 Thread Brad Hards
On Sun, 5 Jun 2005 21:20 pm, Nils Larsch wrote: Is there a way to determine the keylength for DSA keys and DH keys? in case of a EVP_PKEY object EVP_PKEY_bits, otherwise As it turns out, I do have a EVP_PKEY, so this is just what I needed. BN_num_bits(dsa-p). But as the NOTES section in the

Re: Determining key size for DSA and DH?

2005-06-05 Thread Brad Hards
On Sun, 5 Jun 2005 22:03 pm, Brad Hards wrote: On Sun, 5 Jun 2005 21:20 pm, Nils Larsch wrote: Is there a way to determine the keylength for DSA keys and DH keys? in case of a EVP_PKEY object EVP_PKEY_bits, otherwise As it turns out, I do have a EVP_PKEY, so this is just what I needed

Re: Valgrind suppressions?

2005-05-19 Thread Brad Hards
On Mon, 16 May 2005 02:04 am, Nils Larsch wrote: a lot of these warnings are caused by the fact that openssl uses uninitialized memory when creating random numbers etc. . They should be harmless but you may try to build openssl with the -DPURIFY to reduce the number of warnings Thanks Nils -

Valgrind suppressions?

2005-05-15 Thread Brad Hards
I'm coming across a lot of valgrind warnings for the BN code. Eg: ==20718== Conditional jump or move depends on uninitialised value(s) ==20718==at 0x4E34666D: bn_mul_recursive (bn_mul.c:111) ==20718==by 0x4E3475D2: BN_mul (bn_mul.c:708) ==20718==by 0x4E34D1CC: BN_mod_mul_montgomery

Re: Seeking permission to use openssl in a product name

2005-03-14 Thread Brad Hards
On Mon, 14 Mar 2005 07:27 pm, Ted Mittelstaedt wrote: Hmm - well this doesen't look to me like a request for permission, merely a request for opinion of whether or not you need to request permission. Sorry, that wasn't the intent. So, in answer to that, no.  You must request permission to do

Seeking permission to use openssl in a product name

2005-03-13 Thread Brad Hards
I am working on an cryptographic abstraction layer for Qt, imaginatively called the Qt Cryptographic Architecture (QCA). One of the back-end plugins that is in development links to OpenSSL. Right now, the directory name is qca-openssl. When it gets released, each backend will probably be

Re: DH parameters

2005-01-24 Thread Brad Hards
On Tue, 25 Jan 2005 06:50 am, Michael D'Errico wrote: Michael D'Errico wrote: How often should a server generate new DH parameters? Is this a dumb question? Sorry if it is. 1. 36 hours isn't much time to wait for a response. 2. You broke threading, rather than starting a new thread. 3. It

Re: SSL (or alike) over UDP

2005-01-14 Thread Brad Hards
On Fri, 14 Jan 2005 21:10 pm, Eduardo Pérez wrote: Do you know if it's possible to use SSL (or some other protocol) over UDP running totally in user space. Not possible to use SSL. Some other protocol is potentially possible, but you haven't told us what you are trying to accomplish, so it hard

Re: OpenSSL Window Platform

2004-12-22 Thread Brad Hards
On Thu, 23 Dec 2004 04:13 am, Amy Wong wrote: I really appreciate if you can show me where to get the Open SSL in window platform (or if there is any documentation out there). I recently bought the OpenSSL book from O'Reilly - http://www.oreilly.com/catalog/openssl/ Not fully up to date with

Re: HMAC-128

2004-11-23 Thread Brad Hards
On Wed, 24 Nov 2004 02:34 am, Elie Lalo wrote: I know that OpenSSL has the following HMAC(EVP_sha1 (), ) which supports 160 bits. But does OpenSSL support HMAC-128 as well? If yes, could you please tell me where/how I can get information about it. You should be able to use whatever MAC

EVP_DecryptUpdate returns zero length

2004-11-15 Thread Brad Hards
In a larger application (Qt Cryptographic Architecture), I'm trying to wrap some OpenSSL crypto primitives in C++. However I'm having a problem with EVP_DecryptUpdate(). I've done up a quick'n'dirty test case, see below. Now for EVP_EncryptUpdate, this gives me 16. But for EVP_DecryptUpdate(), it