> From: [email protected] On Behalf Of Dr. Stephen Henson > Sent: Thursday, 05 January, 2012 11:34
> On Wed, Jan 04, 2012, [email protected] wrote: <snip: stunnel using 0.9.8r-fips:> > error:05067068:Diffie-Hellman routines:GENERATE_KEY:key size too small > The above problem is cause by FIPS mode refusing to generate > a DH key smaller > than 1024 bits. This is caused by the parameters on the > server which would > need to be updated to be at least 1024 bits: this is > advisable anyway for > security reasons. > Aside: where is this checked? I don't see it in fips-1.1.2 fips-1.0/dh/fips_dh_key.c but I don't use FIPS builds. One unfortunate possibility: if server is Java using JSSE (not a "native" SSL as optional on Tomcat for example), JSSE server hardcodes ephDH as 768 (bad) except 512 for export suites (per standard, but of course export suites are all bad (pace Ahnald)). Related nit: s_server even 1.0.0 defaults tmp_dh to 512! Of course you can override, and it's intended for test only. But for tmp_ecdh 0.9.8 sect163r3 changed to 1.0.0 nistp256v1. > A temporary alternative is to disable the use of EDH > ciphersuites in the > client and only use the static RSA ones. That does however > mean you lose > forward secrecy. > I assume it also works technically to turn off FIPS mode. But if you're going to the extra trouble of running FIPS I assume it's usually because you must. JSSE does support ephECDH (and apparently staticECDH too FWIW) *IF* the underlying algorithm providers support EC primitives. In Java6 the default Sun^WOracle providers don't, you have to add e.g. www.bouncycastle.org . Java7 does. But OpenSSL 0.9.8 has EC suites default-disabled, and I don't know where to check their 140 status (though I know ECDSA is in 186-2, and since ECDH is the same math logically it should be equally okay; but as we've been told 140 isn't entirely logical). ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [email protected]
