Hello, > > I understand that openssl-0.9.8 support SHA256. Is supported as message digest itself.
> I used the latest openssl-0.9.8 (built on linux) and > executed the following commands. > > 1) ./openssl ciphers -v ALL > > I dont find any mention of SHA256 at all. Part of the > output is as follows: > > ADH-AES256-SHA SSLv3 Kx=DH Au=None > Enc=AES(256) Mac=SHA1 > DHE-RSA-AES256-SHA SSLv3 Kx=DH Au=RSA > Enc=AES(256) Mac=SHA1 > ..................................... > ..................................... > > There is no mention of SHA256 in the full output. SHA224/256/384/512 is not supported as SSL/TLS packet integrity mechanism. > Though openssl-0.9.8 is supposed to support SHA256, it > is not present in all the available ciphers/digests. > > 2)In this scenario, How can I use SHA256 as our choice > of digest? (Can I pass SHA256 in cipherlist parameter > for SSL_CTX_set_cipher_list?, I am not sure if it > works.) This will not work. Of course you should consider that if you will use SHA256 there will be 12 bytes more of digest data (SHA256 digest is 32 bytes long) compared to SHA1 (20 bytes long). Best regards, -- Marek Marcola <[EMAIL PROTECTED]> ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [EMAIL PROTECTED]
