Re: EVP Function call errors

g++ -o hasher hasher.o form1.o moc_form1.o -L/usr/qt/3/lib -L/usr/X11R6/lib -lqt -lXext -lX11 -lm You need to add -lcrypto and maybe -lssl. Mike __ OpenSSL Project http://www.openssl.org User

Re: transformation from WinInet

Im preparing to transform an app from using WinInet to OpenSSL does anyone have any recommendations, sources, resources, caveats, etc., that I can use to accomplish this endeavor? Buy a copy of Network Security with OpenSSL by O'Reilly Associates. Mike

Re: [newbie] generating a random key?

I'm trying to generate a more or less random key. I was trying to do something similar, but then I found the EVP_SealInit family of functions which generate a random key and init vector for you. Maybe you have different needs, but I thought I would at least make you aware of it. Mike

Re: RAND_seed()

You can try using RAND_poll() instead. It tries several things to gather random data. I believe that this is called automatically for you anyway. Mike __ OpenSSL Project http://www.openssl.org

Decryption problem

I'm having a problem where after encrypting data and then decrypting it, the result is a few bytes of garbage (probably one block), and then the rest of the data is the same as the original. I'm using EVP_Seal* and EVP_Open* to perform the encryption. I tested with AES, DESX, and blowfish, and

Re: Decryption problem

I forgot to mention that this happens with CBC and CFB modes; OFB gives all garbage, but I'm hopeful that fixing CBC and CFB modes will also fix OFB mode. I am using OpenSSL 0.9.7f on mingw. Mike Michael D'Errico wrote: I'm having a problem where after encrypting data and then decrypting

Re: Decryption problem

Turns out there is wrong information in Network Security with OpenSSL about using EVP_SealInit. It indicates that you are to pass in an init vector, but EVP_SealInit generates one and passes it back to the caller. Once I figured this out, I got everything to work. Mike

EVP_SealInit and key length

Is there any way to specify the key length to use in EVP_SealInit? (Besides AES where the EVP_CIPHER specifies the length.) If not, how do you figure out how long a key was used? Thanks, Mike __ OpenSSL Project

Re: BIO memory leak

Try the FAQ. This gets asked a *lot*. I call ERR_remove_state in my thread cleanup routine, but was unaware of the other functions mentioned in the FAQ. Should I also call these other functions in my thread cleanup routine? Or is the data allocated per-application and not per-thread? Thanks, Mike

Re: Key generation

It turns out what I needed was EVP_SealInit, so I don't need to generate my own key. Thanks for the responses though. Mike Richard Levitte - VMS Whacker wrote: In message [EMAIL PROTECTED] on Wed, 16 Mar 2005 14:32:03 -0800, Michael D'Errico [EMAIL PROTECTED] said: mike-mlm I read somewhere

DSA key size

I want to find out how big a DSA key is (to enforce a lower limit) but DSA_size only reports the size of a signature. Is there some way to find out how many bits the key is? Thanks, Mike __ OpenSSL Project

Re: Key generation

I read somewhere that it is a good idea to cryptographically hash your key material to generate a key, so I wrote a function to do that. it's an even better idea to use well known/tested algorithm for key generation I haven't run across any; can you point me in the right direction? Or do you

Key generation

Hi, I read somewhere that it is a good idea to cryptographically hash your key material to generate a key, so I wrote a function to do that. I'm not exactly sure I'm doing what they suggest, so if anyone cares to, can you check over my work and see if there are any weaknesses? Thanks in advance.

Re: DH parameters

Michael D'Errico wrote: How often should a server generate new DH parameters? Is this a dumb question? Sorry if it is. Mike __ OpenSSL Project http://www.openssl.org User Support Mailing List

Re: DH parameters

How often should a server generate new DH parameters? Is this a dumb question? Sorry if it is. 1. 36 hours isn't much time to wait for a response. I forgot it was the weekend; I've been reading the list for several weeks now and the questions that get answered are answered quickly. 2. You broke

Seeding the random number generator

Hi, I need to seed the random number generator on Windows and can't rely on a service such as EGADS being installed and running. What would you recommend I do to gather random bytes for the seed? Thanks, Mike P.S. sorry if this message shows up twice but I sent it last night and haven't received

Re: Seeding the random number generator

I need to seed the random number generator on Windows and can't rely on a service such as EGADS being installed and running. What would you recommend I do to gather random bytes for the seed? Which versions of Windows are you referring to? On 2k and upwards (maybe also on NT4 with current Service

Re: Seeding the random number generator

Thanks for the info. I'm glad it is done automatically. :-) Mike Bernhard Froehlich wrote: Michael D'Errico wrote: I need to seed the random number generator on Windows and can't rely on a service such as EGADS being installed and running. What would you recommend I do to gather random bytes

DH parameters

How often should a server generate new DH parameters? Thanks, Mike __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List