Yes it does. Frédéric Giudicelli http://www.newpki.org
----- Original Message ----- From: "Marcus Carey" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, May 30, 2003 4:12 AM Subject: Re: What's the strongest encryption available > So when generating a key, how do I determing the size? > > If the bits paramater in RSA_generate_key fuction equals 128, does this mean > I have created a 128 bit key? > > RSA_generate_key(bits,RSA_F4,NULL,NULL); > > Marcus > > > ----- Original Message ----- > From: "Rich Salz" <[EMAIL PROTECTED]> > To: "Marcus Carey" <[EMAIL PROTECTED]> > Cc: <[EMAIL PROTECTED]> > Sent: Thursday, May 29, 2003 6:24 PM > Subject: Re: What's the strongest encryption available > > > > > VeriSign claims its 128-bit $889 Secure Site Pro Certificate is > > > the strongest encryption available. Is this true? > > > > That's using 128bit RC4 for the bulk encryption of SSL/TLS traffic between > > server and client. > > > > > If so how is it possible to create a 1024 bit or greater RSA private key > > > with OpenSSL? > > > > It's a different crypto/cipher algorithm. In most SSL use, RSA is used > > to exchange a bulk encryption key. So you need both. You should ask > > Verisign how big a key they're willing to sign; will the 2Kbit RSA key > > in their CA sign a cert for a 4Kbit key? :) > > > > > Also what's the maximum bit value that OpenSSL supports? > > > > Depends on the cipher. At least as much as the standards specify. :) > > OpenSSL has supported 128bit RC4 from day one. > > /r$ > > > > ______________________________________________________________________ > > OpenSSL Project http://www.openssl.org > > User Support Mailing List [EMAIL PROTECTED] > > Automated List Manager [EMAIL PROTECTED] > > > --- > Outgoing mail is certified Virus Free. > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.481 / Virus Database: 277 - Release Date: 5/13/2003 > > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List [EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED] > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
