OpenSSL's cryptolib and SET

2000-02-15 Thread Xavier Defrang


Hi,

I'm implementing a subset of the SET protocol and since I'm still a
student : I'm not a crypto-expert.  So, I searched the internet to find
some good and free cryptography 
software.  As far as I've seen, cryptolib seems to fullfill my needs but
I'd like to know whether I can build my application on top of it or
not.  Here are my requirements :

  - RSA, OAEP DES and CDMF encryption/decryption
  - SHA-1 digest computation
  - Basic X.509 Certificate Management (Disk storage, CRL look-up, ...)

I'd just like to know which of the previous tasks can be done using the
OpenSSL.
Parsing/Writing of DER bitstream our of some data structure would be
highly appreciate : does OpenSSL provides routines for that?  Otherwise,
where can I find a free library to do so?

Best regards,

-- Xavier
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: OpenSSL's cryptolib and SET

2000-02-17 Thread Bodo Moeller

Ulf Möller <[EMAIL PROTECTED]>:

>>   - RSA, OAEP DES and CDMF encryption/decryption
>>   - SHA-1 digest computation
>>   - Basic X.509 Certificate Management (Disk storage, CRL look-up, ...)
>> 
>> I'd just like to know which of the previous tasks can be done using the
>> OpenSSL.

> CDMF doesn't ring a bell, so I guess OpenSSL doesn't support that.

"Commercial Data Masking Facility", IBM's patented DES-based 40-bit
symmetric cipher.  (They refuse to call it "encryption" because of the
short key length, hence the term "data masking".)  This should be
obsolete given the current US export rules.  CDMF should be
straight-forward to implement based on the existing DES
implementation, the description is available in some issue of the IBM
research journal.
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]