Most likely these will sound like really stupid questions, but honest
they're the same questions I've had to ask myself to find the answers. Have
you verified that the parameters used by both sides are the same? Have you
verified that the public key is transferred correctly? I'm just trying to
narrow down where the problem is. If these aren't the problem than have you
verified that g does not divide p? (it shouldn't if you called DH_generate
parameters but since there's obviously a problem . . . ) Have you checked to
see that the openSSL implementation computes a set of test vectors for
exponentiation properly?
Joe
----- Original Message -----
From: "Bruker, Ohad" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, February 14, 2001 6:25 PM
Subject: RE: symmetric key produced by Diffie-Helman alg. not equal in both
sides
> Of course I'm calling the DH_compute_key(...) after sharing the DH public
> key both sides.
> The symmetric keys are already produced successfully on Windows and Linux.
> Thanks, Ohad.
>
>
> -----Original Message-----
> From: Joseph Ashwood [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, February 14, 2001 6:14 PM
> To: [EMAIL PROTECTED]
> Subject: Re: symmetric key produced by Diffie-Helman alg. not equal in
> both sides
>
>
> If all you're callling is DH_generate_key(...) then it should create
> different keys. That function call only generates the public and private
> keys. What you need to do is:
> DH_generate_parameters(...)
> transfer the parameters between machines so that they are both working in
> the same field
> DH_generate_key(...)
> the machines swap public keys
> DH_compute_key(...)
> the output of DH_compute_key on both machines should be identical. If
that's
> not identical I can help you build the computations from scratch and that
> will work (it's not much harder than calling the functions above).
> Joe
>
> ______________________________________________________________________
> OpenSSL Project http://www.openssl.org
> User Support Mailing List [EMAIL PROTECTED]
> Automated List Manager [EMAIL PROTECTED]
> ______________________________________________________________________
> OpenSSL Project http://www.openssl.org
> User Support Mailing List [EMAIL PROTECTED]
> Automated List Manager [EMAIL PROTECTED]
>
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
