[openssl-users] CMS questions

[Richard Welty]

i'm starting on some work that needs to use CMS in an
application, and i'm having trouble getting my head
wrapped around how to handle the case of verifying
a signature and then decrypting the enveloped data
that has been signed. specifically, i'm not grasping
how to extract the encrypted data to pass to CMS_decrypt
after verification is done. do i need to use a BIO
filter for this or is there some other mechanism i'm not
seeing?

thanks in advance,
  richard

-- 
rwe...@averillpark.net
 Averill Park Networking - GIS  IT Consulting
 OpenStreetMap - PostgreSQL - Linux
 Java - Web Applications - Search




signature.asc
Description: OpenPGP digital signature
___
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

[openssl-users] fips_ecdhvs failing for non Prime Curves

[Bala Duvvuri]

Hi All,

I am trying to test the FIPS ECDH support present in OpenSSL i.e trying to run 
the fips_ecdhvs.c test.

The test vectors  ECC CDH Primitive Test Vectors from NIST website have been 
downloaded - http://csrc.nist.gov/groups/STM/cavp/#09 and given as the input.

The test passes for the vectors that have the field type - 
NID_X9_62_prime_field (NIST Prime-Curve P-192, P-256 etc ) but outputs wrong 
shared key for other curves like (NIST Binary-Curve K-163/B-163/K-233 etc)

The test is run using the command - ./fips_ecdhvs ecdhver 
KAS_ECC_CDH_PrimitiveTest.txt Out

One observation is the non prime test vectors have 0 at the begining:

QIUTx = 00071f8b2877d6027d9c1ade4244f2dea12692ef23d5
QIUTy = 0005c15ee776221c72b84b347ce383f38067b89c3e9a

If we print the EC key using ec_print_key, we find the leading 0's missing, is 
this ok?

QIUTx = 071f8b2877d6027d9c1ade4244f2dea12692ef23d5
QIUTy = 05c15ee776221c72b84b347ce383f38067b89c3e9a

Please let me know how to make the above test work?

thanks,
Bala
___
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

[openssl-users] FIPSLD 2.0.5 (HP-UX AI64 11.23) fails to link with pthread error

[Mrunal Nerpawar]

Details
==
Fips 2.0.5 configured with no-asm and threads.
Openssl 1.0.1H configured with shared, fips, threads no-asm (many alogos
omitted)
compiler -  using aCC 6.25 on HPUX-IA64 11.23.

bash-2.05$ aCC --version
aCC: HP C/aC++ B3910B A.06.25.02 [Nov 25 2010]
bash-2.05$

product linking with fipsld fails with error ...
=
:DLFCN_LOAD:could not load the shared
library:dso_dlfcn.c:187:filename(./objs/HP-UX-B.11.23-ia64-64/libDataSourceImpl.so.10.0.0):
Cannot dlopen load module '/usr/lib/hpux32/libpthread.so.1' because it
contains thread specific data.

Options tried
==
* Compiling Cxx sources with -mt.
* Linking with -lpthread,
* setting LD_PRELOAD.
None worked effectively. with LD_PRELOAD option, ended up getting error -
undefined symbol Ztil, etc.

complete error is as follows.
=

Building shared library
objs/HP-UX-B.11.23-ia64-64/libDataSourceImpl.so.10.0.0
FIPSLD_CC=aCC FIPSLD_LINK=aCC
/unixhome/user/workspace/product/../3rdPt/Unix/HP-UX/ia64/OpenSource/ssl-1.0.1h/bin/fipsld
+Z -b -g -O2 -AA -Wl,+s +tls=dynamic -o
objs/HP-UX-B.11.23-ia64-64/libDataSourceImpl.so.10.0.0
objs/HP-UX-B.11.23-ia64-64/stdafx.o objs/HP-UX-B.11.23-ia64-64/UserUtil.o
objs/HP-UX-B.11.23-ia64-64/LSSpawner.o
objs/HP-UX-B.11.23-ia64-64/LSFilter.o
objs/HP-UX-B.11.23-ia64-64/LSCmdOutputParser.o
objs/HP-UX-B.11.23-ia64-64/LSBuilderAndProcessor.o
objs/HP-UX-B.11.23-ia64-64/LSBuilderAndProcessor_1.o
objs/HP-UX-B.11.23-ia64-64/LSBuilderAndProcessor_2.o
objs/HP-UX-B.11.23-ia64-64/GroupUtil.o
objs/HP-UX-B.11.23-ia64-64/ShadowHelper.o
objs/HP-UX-B.11.23-ia64-64/BlockedFiles.o
objs/HP-UX-B.11.23-ia64-64/NISUtil.o objs/HP-UX-B.11.23-ia64-64/Utilities.o
objs/HP-UX-B.11.23-ia64-64/MachineUtil.o
objs/HP-UX-B.11.23-ia64-64/BvNetworkInfo.o
objs/HP-UX-B.11.23-ia64-64/NSSwitch.o
objs/HP-UX-B.11.23-ia64-64/FileUtil_1.o
objs/HP-UX-B.11.23-ia64-64/FileUtil_2.o
objs/HP-UX-B.11.23-ia64-64/SecurityThreatCheck.o
objs/HP-UX-B.11.23-ia64-64/UserEnumerator.o
objs/HP-UX-B.11.23-ia64-64/LocalUserEnumerator.o
objs/HP-UX-B.11.23-ia64-64/UnixUserEnumerator.o
objs/HP-UX-B.11.23-ia64-64/WinUserEnumerator.o
objs/HP-UX-B.11.23-ia64-64/GetEntHandler.o
objs/HP-UX-B.11.23-ia64-64/UnixShadowReader.o
objs/HP-UX-B.11.23-ia64-64/EtcShadowReader.o
objs/HP-UX-B.11.23-ia64-64/UnixEtcShadowReader.o
objs/HP-UX-B.11.23-ia64-64/AIXShadowHelper.o
objs/HP-UX-B.11.23-ia64-64/HPLoginsShadowHelper.o
objs/HP-UX-B.11.23-ia64-64/HPTcbShadowHelper.o
objs/HP-UX-B.11.23-ia64-64/UnixHPShadowReader.o
objs/HP-UX-B.11.23-ia64-64/ProcessUtil.o
objs/HP-UX-B.11.23-ia64-64/FieldUtils.o
objs/HP-UX-B.11.23-ia64-64/LoggedInUserInfo.o
objs/HP-UX-B.11.23-ia64-64/TcpdRulesParser.o
objs/HP-UX-B.11.23-ia64-64/DirectoryUtil.o
objs/HP-UX-B.11.23-ia64-64/Timestamp.o
objs/HP-UX-B.11.23-ia64-64/Timespan.o
objs/HP-UX-B.11.23-ia64-64/NumberFormatter.o
objs/HP-UX-B.11.23-ia64-64/DateTimeParser.o
objs/HP-UX-B.11.23-ia64-64/DateTimeFormatter.o
objs/HP-UX-B.11.23-ia64-64/DateTimeFormat.o
objs/HP-UX-B.11.23-ia64-64/DateTime.o objs/HP-UX-B.11.23-ia64-64/Timezone.o
objs/HP-UX-B.11.23-ia64-64/LocalDateTime.o
objs/HP-UX-B.11.23-ia64-64/RFUtilities.o
objs/HP-UX-B.11.23-ia64-64/OpenPortUtil.o
objs/HP-UX-B.11.23-ia64-64/AIXStanzaReader.o
objs/HP-UX-B.11.23-ia64-64/Bugcheck.o objs/HP-UX-B.11.23-ia64-64/DateTime.o
objs/HP-UX-B.11.23-ia64-64/Debugger.o
objs/HP-UX-B.11.23-ia64-64/Exception.o
objs/HP-UX-B.11.23-ia64-64/GroupEnumerator.o
objs/HP-UX-B.11.23-ia64-64/UnixGroupEnumerator.o
objs/HP-UX-B.11.23-ia64-64/FileInfoFetcher.o
objs/HP-UX-B.11.23-ia64-64/UnixFileInfoAccessor.o
objs/HP-UX-B.11.23-ia64-64/FileStatSysCallProcessor.o
objs/HP-UX-B.11.23-ia64-64/StatSysCallFileInfoFetcherImpl.o
objs/HP-UX-B.11.23-ia64-64/FileInfoAccessor.o
objs/HP-UX-B.11.23-ia64-64/FileProcessorObjectFactory.o
objs/HP-UX-B.11.23-ia64-64/UUID.o objs/HP-UX-B.11.23-ia64-64/RandomStream.o
objs/HP-UX-B.11.23-ia64-64/Random.o objs/HP-UX-B.11.23-ia64-64/SHA1Engine.o
objs/HP-UX-B.11.23-ia64-64/DigestEngine.o
objs/HP-UX-B.11.23-ia64-64/FileDescriptorUtil.o
objs/HP-UX-B.11.23-ia64-64/PasswordInfo.o
objs/HP-UX-B.11.23-ia64-64/DictionaryReader.o
objs/HP-UX-B.11.23-ia64-64/PasswordCracker.o
objs/HP-UX-B.11.23-ia64-64/md5crypt.o
-L/unixhome/user/workspace/ontrolShared/UnixReusableClasses/lib/HP-UX-B.11.23-ia64-64
-lReCpp -lReCommon
-L/unixhome/user/workspace/product/../3rdPt/Unix/HP-UX/ia64/lib -lcrypto
-L/unixhome/user/workspace/product/lib/HP-UX-B.11.23-ia64-64 -lAgentCommon
-lReCoreClasses -lCommonLib  -lsec
fipsld:
THERE=/unixhome/user/workspace/product/../3rdPt/Unix/HP-UX/ia64/OpenSource/ssl-1.0.1h/bin/..
fipsld: TARGET=./objs/HP-UX-B.11.23-ia64-64/libDataSourceImpl.so.10.0.0
fipsld:
CANISTER_O=/unixhome/user/workspace/product/../3rdPt/Unix/HP-UX/ia64/OpenSource/ssl-1.0.1h/bin/../lib/fipscanister.o
fipsld:
PREMAIN_C=/unixhome/user/workspace/product/../3rdPt/Unix/HP-UX/ia64/OpenSource/ssl-1.0.1h/bin/../lib/fips_premain.c
fipsld: PREMAIN_O=objs/HP-UX-B.11.23-ia64-64/fips_premain.o
fipsld: FIPSLIBDIR=