ECDSA signature verification

2009-01-19 Thread Young, Alistair
Hi, I'm new to OpenSSL, having just installed openssl-fips-1.2. I'm looking for some guidance in how to use OpenSSL (from the command line) to verify ECDSA signatures. In particular, I have the following questions: * is it possible to define our own curves (rather than using one of the

Hashing bit-oriented data

2009-01-19 Thread Young, Alistair
Hello, Using the OpenSSL command line, is it possible to compute hashes of data which is not a whole number of bytes in length? For example, a block of data consisting of (say) 110 bits? Padding the data is not an option, because we need to be able to verify hashes which have been computed

RE: Hashing bit-oriented data

2009-01-19 Thread Young, Alistair
-Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Ger Hobbelt Sent: 19 January 2009 14:00 To: openssl-users@openssl.org Subject: Re: Hashing bit-oriented data On Mon, Jan 19, 2009 at 1:48 PM, Young, Alistair alistair.yo

RE: ECDSA signature verification

2009-01-23 Thread Young, Alistair
On Mon, 2009-01-19 at 11:22 +, Young, Alistair wrote: * is it possible to define our own curves (rather than using one of the predefined curves)? if you want to play with your EC, check crypto/ec/ectest.c if you want to add a new curve to openssl, have a look at crypto/ec/ec_curve.c, crypto

RE: ECDSA signature verification

2009-01-23 Thread Young, Alistair
- is there an extra 'not' in this statement?), but that perhaps doesn't cover ECDSA. Alistair. -Original Message- From: Young, Alistair Sent: 23 January 2009 10:13 To: 'openssl-users@openssl.org' Subject: RE: ECDSA signature verification Thank you, Emanuele. We really need to use the FIPS

RE: ECDSA signature verification

2009-01-23 Thread Young, Alistair
-Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Dr. Stephen Henson Sent: 23 January 2009 13:07 To: openssl-users@openssl.org Subject: Re: ECDSA signature verification On Fri, Jan 23, 2009, Young, Alistair wrote

OpenSSL command line HMAC

2009-01-30 Thread Young, Alistair
Hi, To generate an HMAC key using SHA-256, I can issue the following command: openssl dgst -sha256 -hmac key -binary message.bin mac.bin I realised (eventually!) that the key is not supplied as a hex string (0a0b34e5.. etc.) but in a binary format. Obviously this leads to some fairly

RE: OpenSSL command line HMAC

2009-02-04 Thread Young, Alistair
to be looming ever closer. Thanks, Alistair. From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Young, Alistair Sent: 30 January 2009 09:31 To: openssl-users@openssl.org Subject: OpenSSL command line HMAC Hi, To generate

RE: OpenSSL command line HMAC

2009-02-05 Thread Young, Alistair
-Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Dr. Stephen Henson Sent: 04 February 2009 15:20 To: openssl-users@openssl.org Subject: Re: OpenSSL command line HMAC On Wed, Feb 04, 2009, Young, Alistair wrote: Well

RE: OpenSSL command line HMAC

2009-02-05 Thread Young, Alistair
-Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Dr. Stephen Henson Sent: 05 February 2009 12:29 To: openssl-users@openssl.org Subject: Re: OpenSSL command line HMAC On Thu, Feb 05, 2009, Young, Alistair wrote: Thanks

RE: OpenSSL command line HMAC

2009-02-06 Thread Young, Alistair
Hi Steffen! -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Steffen DETTMER Sent: 06 February 2009 13:33 To: Everyone Subject: Re: OpenSSL command line HMAC Hi all, Hi Alistair! * Young, Alistair wrote on Fri, Feb 06

RE: OpenSSL command line HMAC

2009-02-06 Thread Young, Alistair
...@openssl.org On Behalf Of Young, Alistair Sent: Wednesday, 04 February, 2009 09:52 I seem to have some success if I place quotes around the [Linux] command line: $ cat message.bin | openssl dgst -sha256 -hmac `cat key.bin` -binary mac.bin (Don't need cat here, just on the openssl

RE: OpenSSL command line HMAC

2009-02-09 Thread Young, Alistair
-Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Dave Thompson Sent: 07 February 2009 01:59 To: openssl-users@openssl.org Subject: RE: OpenSSL command line HMAC Without the quotes, if my hmac key contains a space or tab

RE: [openssl-users] Re: Blowfish output using openssl is too long

2009-03-20 Thread Young, Alistair
-Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Erwann ABALEA Sent: 20 March 2009 10:58 To: openssl-users@openssl.org Subject: Re: [openssl-users] Re: Blowfish output using openssl is too long Hi, Hodie XIII Kal. Apr.