Re: BN_hex2bn() failed but ERR_get_error() returned no error?

2008-09-19 Thread Jian Wang
Thanks, Tim. Maybe I should look at the code sometime if it's not too difficult for me to understand. :) On Thu, Sep 18, 2008 at 13:01, Tim Hudson [EMAIL PROTECTED] wrote: Clark J. Wang wrote: Hi list: I'm new to OpenSSL and have a problem when trying BIGNUM usage. The function

Re: errors while installing openssl-SNAP-20080915

2008-09-19 Thread Ger Hobbelt
Ajay, I did not mean the commandline options for nmake, but for the compiler itself (cl.exe). Quick check in documentation -- /WX option must be removed (in your cl.exe commandline, that is the '-WX' option. Checked the repository -- you should remove the '-WX' from the Configure script (and

Re: Do you have to pre-pend 16 bytes to a raw value before RSA encryption

2008-09-19 Thread Ger Hobbelt
:-) Well, the 'funny' bit in your original message is that it's not about 'padding' (what the others talk about) as 'padding' always ends up FOLLOWING (after) your content/data, while you specifically mention you have to _precede_ your data with 16 bytes of... what? Which makes it kinda weird,

RE: Do you have to pre-pend 16 bytes to a raw value before RSA encryption

2008-09-19 Thread Peter Walker
Yep that explains it perfectly, thanks. The data I pre-pend is 16 bytes of random data right at the very start and the original data length is anywhere between 13 and 21 bytes. I'm using a combination of the openSSL RAND functions and seeding from /dev/urandom, which is working perfectly.

Re: How to use a hardware RNG with openssl?

2008-09-19 Thread Lutz Jaenicke
Gerd Schering wrote: Hello, we purchased a hrng for the generation of RSA keys for instance. It is an USB device an shows up as /dev/qrandom. So, in order to generate rsa keys, is it sufficient to use it as a replacement for /dev/urandom and to call genrsa as openssl genrsa -rand

Re: How to use a hardware RNG with openssl?

2008-09-19 Thread Steffen DETTMER
* Lutz Jaenicke wrote on Fri, Sep 19, 2008 at 14:22 +0200: we purchased a hrng for the generation of RSA keys for instance. It is an USB device an shows up as /dev/qrandom. Note: if /dev/urandom is available, OpenSSL will read an additional amount of random bytes from it whether an

RSA_sign, RSA_verify and padding

2008-09-19 Thread Marco Sommella
Hi, I'm using OpenSSL 0.9.8a 11 Oct 2005 (+ security patches to 2007-10-13) on opensolaris 2008.11 b97 and programming in C. My question is about the message digest *m used into functions in object.* ** *I have notice a strange *behavior concerning the length of this string: if too long and/or

RSA_sign, RSA_verify and padding

2008-09-19 Thread Marco Sommella
Hi, I'm using OpenSSL 0.9.8a 11 Oct 2005 (+ security patches to 2007-10-13) on opensolaris 2008.11 b97 and programming in C. My question is about the message digest *m used into functions in object.* ** *I have notice a strange *behavior concerning the length of this string: if too long and/or

Re: How to use a hardware RNG with openssl?

2008-09-19 Thread Lutz Jaenicke
Steffen DETTMER wrote: * Lutz Jaenicke wrote on Fri, Sep 19, 2008 at 14:22 +0200: we purchased a hrng for the generation of RSA keys for instance. It is an USB device an shows up as /dev/qrandom. Note: if /dev/urandom is available, OpenSSL will read an additional amount of random

Re: Openssl Fips Shared Library

2008-09-19 Thread joshi chandran
How to link fipsld linking to set the in-core hash. can u please tell me how to link fipsld to the fips module. when i am using fipsld it is showing no -o specified $ sh fipsld no -o specified can u please tell me wat does -o indicate here and please give the list of other options and there

Re: How to use a hardware RNG with openssl?

2008-09-19 Thread Steffen DETTMER
Hi, thanks a lot for your detailed explanation. * Lutz Jaenicke wrote on Fri, Sep 19, 2008 at 16:46 +0200: OpenSSL's internal PRNG uses a 1024 byte pool mixing entropy with SHA-1 so the more bytes a mixed in, the better. At least it cannot hurt to add any input to it as the entropy in the

Re: How to use a hardware RNG with openssl?

2008-09-19 Thread Lutz Jaenicke
Steffen DETTMER wrote: * Lutz Jaenicke wrote on Fri, Sep 19, 2008 at 16:46 +0200: OpenSSL's internal PRNG uses a 1024 byte pool mixing entropy with SHA-1 so the more bytes a mixed in, the better. At least it cannot hurt to add any input to it as the entropy in the pool can never decrease

Re: RSA_sign, RSA_verify and padding

2008-09-19 Thread Dr. Stephen Henson
On Fri, Sep 19, 2008, Marco Sommella wrote: Hi, I'm using OpenSSL 0.9.8a 11 Oct 2005 (+ security patches to 2007-10-13) on opensolaris 2008.11 b97 and programming in C. My question is about the message digest *m used into functions in object.* ** *I have notice a strange *behavior

Re: Openssl Fips Shared Library

2008-09-19 Thread Kyle Hamilton
use 'fipsld' the same way you would use your system-provided ld. It requires a list of input files and a -o to set the name of the output file. -Kyle H On Fri, Sep 19, 2008 at 7:53 AM, joshi chandran [EMAIL PROTECTED] wrote: How to link fipsld linking to set the in-core hash. can u please