Re: Issue With continous PRNG test with Fips module of openssl

2011-09-26 Thread alok sharma
Hi, Thanks for the help, it resolved my problem. Regards, Alok On Fri, Sep 23, 2011 at 5:59 PM, Dr. Stephen Henson st...@openssl.orgwrote: On Fri, Sep 23, 2011, alok sharma wrote: Hi, Ok I got your point. I think it will be helpful.Do you have any link or precedure to setup

Re: Issue With continous PRNG test with Fips module of openssl

2011-09-23 Thread alok sharma
Hi, So is there any method on Windows to generate non-predictable randomnumbers. I think mostly FileSytem time is used to seed randomness which is failing in my case. Regards, Alok On Mon, Sep 19, 2011 at 4:52 PM, Dr. Stephen Henson st...@openssl.orgwrote: On Mon, Sep 19, 2011, alok sharma

Re: Issue With continous PRNG test with Fips module of openssl

2011-09-23 Thread Jeffrey Walton
On Fri, Sep 23, 2011 at 4:59 AM, alok sharma alokonm...@gmail.com wrote:     So is there any method on Windows to generate non-predictable randomnumbers. I think mostly FileSytem time is used to seed randomness which is failing in my case. One typically uses CryptGenRandom. Jeff On Mon, Sep

Re: Issue With continous PRNG test with Fips module of openssl

2011-09-23 Thread Dr. Stephen Henson
On Fri, Sep 23, 2011, alok sharma wrote: Hi, So is there any method on Windows to generate non-predictable randomnumbers. I think mostly FileSytem time is used to seed randomness which is failing in my case. As I indicated this shouldn't be happening if you've set up locking callbacks

Re: Issue With continous PRNG test with Fips module of openssl

2011-09-23 Thread alok sharma
I am using the openssl fips version for my application.So, I have not made any change in openssl or Fips code. Just enabling fips and using SSL API exposed for client server model. But through debugger I have found that my application is crashing giving error message inside Fips_rand() at

Re: Issue With continous PRNG test with Fips module of openssl

2011-09-23 Thread Dr. Stephen Henson
On Fri, Sep 23, 2011, alok sharma wrote: I am using the openssl fips version for my application.So, I have not made any change in openssl or Fips code. Just enabling fips and using SSL API exposed for client server model. But through debugger I have found that my application is crashing

Re: Issue With continous PRNG test with Fips module of openssl

2011-09-23 Thread Dr. Stephen Henson
On Fri, Sep 23, 2011, alok sharma wrote: Hi, The error message comes when we invoke SSL_accept() API. But taking lock on it will affect performance as it performs network operation inside this API (like client hello message and other). So if network is overloaded then mutex hold time

Re: Issue With continous PRNG test with Fips module of openssl

2011-09-23 Thread alok sharma
Hi, Ok I got your point. I think it will be helpful.Do you have any link or precedure to setup these call backs or these are just function pointers which needs to be initialized at ssl initialization time. Regards, Alok On Fri, Sep 23, 2011 at 5:22 PM, Dr. Stephen Henson

Re: Issue With continous PRNG test with Fips module of openssl

2011-09-23 Thread Dr. Stephen Henson
On Fri, Sep 23, 2011, alok sharma wrote: Hi, Ok I got your point. I think it will be helpful.Do you have any link or precedure to setup these call backs or these are just function pointers which needs to be initialized at ssl initialization time. See the FAQ:

Re: Issue With continous PRNG test with Fips module of openssl

2011-09-19 Thread alok sharma
Hi Jacob, Thanks for such a detailed reply. But I am having one concern that how an application can know whether it si secure or not. Fips uses GetSystemTimeAsFileTime() for PRNG test which is having granuality of 1 ns, but my application is running even at faster rate so same value is being

Re: Issue With continous PRNG test with Fips module of openssl

2011-09-19 Thread Jakob Bohm
On 9/19/2011 8:49 AM, alok sharma wrote: Hi Jacob, Thanks for such a detailed reply. But I am having one concern that how an application can know whether it si secure or not. Fips uses GetSystemTimeAsFileTime() for PRNG test which is having granuality of 1 ns, but my application is

Re: Issue With continous PRNG test with Fips module of openssl

2011-09-19 Thread Dr. Stephen Henson
On Mon, Sep 19, 2011, alok sharma wrote: Hi Jacob, Thanks for such a detailed reply. But I am having one concern that how an application can know whether it si secure or not. Fips uses GetSystemTimeAsFileTime() for PRNG test which is having granuality of 1 ns, but my application is

Re: Issue With continous PRNG test with Fips module of openssl

2011-09-15 Thread Jakob Bohm
On 9/14/2011 6:33 PM, alok sharma wrote: Hi, I am having my client server on Windows. The server is concurrent and having each thread for each connection. When the number of connection increases to 400-500 i.e having high thread load, my server crashes. I debuged it and found that it

Issue With continous PRNG test with Fips module of openssl

2011-09-14 Thread alok sharma
Hi, I am having my client server on Windows. The server is concurrent and having each thread for each connection. When the number of connection increases to 400-500 i.e having high thread load, my server crashes. I debuged it and found that it gives error (“random number