CMS decryption of message with OAEP using Hardware security module

2020-02-17 Thread RudyAC
Hi, I have the requirement to decrypt e-mails where RSA-OAEP padding is used. I use the library openssl-1.0.2k and decrypt with CMS container (CMS_decrypt). This works very well unless the private key is stored in a Hardware security module and the cryptographic operation is performed via the

QUIC in OpenSSL

2020-02-17 Thread Matt Caswell
The OMC has just published a blog post on our thoughts on QUIC in OpenSSL. You can read it here: https://www.openssl.org/blog/blog/2020/02/17/QUIC-and-OpenSSL/ Matt

Re: OpenSSL on embedded systems

2020-02-17 Thread Jan Just Keijser
On 17/02/20 11:51, Innocenti, Michele via openssl-users wrote: Hi, Which is the minimum footprint needed to use OpenSSL TLS 1.3 library in an embedded context? Which embedded OS are supported? i.e. FreeRTOS, VxWorks, Micirium uC-OS AFAICT, OpenSSL is supported on VxWorks, not on RTOS or

OpenSSL on embedded systems

2020-02-17 Thread Innocenti, Michele via openssl-users
Hi, Which is the minimum footprint needed to use OpenSSL TLS 1.3 library in an embedded context? Which embedded OS are supported? i.e. FreeRTOS, VxWorks, Micirium uC-OS Thanks Michele [cid:image001.png@01D1DDF5.DD36FEF0] Michele Innocenti Sr Principal Engineer, SW Eng Baxter Healthcare

Re: SSL_get_finished determine length

2020-02-17 Thread Samuel Williams
So what is the valid way to do it? Invoke it with a 1 byte array? Maybe an example should be added to the manual page? On Thu, 6 Feb 2020 at 23:18, Marian Beermann wrote: > > Is it valid to call: > > > > size_t size = SSL_get_finished(ssl, NULL, 0); > > No > > > Because SSL_get_finished invokes