Re: [openssl-users] additional data (MAC'ed only) over TLS connection?

[Dr. Stephen Henson]

On Mon, Aug 15, 2016, Thomas Knauth wrote:

> Hi list,
> 
> the EVP_EncryptUpdate function has the option to pass data that is
> only MAC'ed but not encrypted. Is there some similar provision in the
> BIO interface? I have a use case, where I'd like to "inject"
> pre-encrypted/pre-mac'ed data into a TLS stream. Any suggestion on a
> low-effort way to do this?
> 

In the BIO interface as such, no.

However you can retrieve the EVP_CIPHER_CTX associated with the BIO and handle
things that way.

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] additional data (MAC'ed only) over TLS connection?

[Salz, Rich]

> the EVP_EncryptUpdate function has the option to pass data that is only
> MAC'ed but not encrypted. Is there some similar provision in the BIO
> interface? I have a use case, where I'd like to "inject"
> pre-encrypted/pre-mac'ed data into a TLS stream. Any suggestion on a low-
> effort way to do this?

You mean you have an SSL BIO, and you want to avoid the SSL 
encryption/record-layer/etc for part of it?

Not possible.

-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

[openssl-users] additional data (MAC'ed only) over TLS connection?

[Thomas Knauth]

Hi list,

the EVP_EncryptUpdate function has the option to pass data that is
only MAC'ed but not encrypted. Is there some similar provision in the
BIO interface? I have a use case, where I'd like to "inject"
pre-encrypted/pre-mac'ed data into a TLS stream. Any suggestion on a
low-effort way to do this?

Kind regards,
Thomas.
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users