Re: EVP & DES, was: EVP_CipherInit() doesn't check for weak DES keys (0.9.6)

2002-04-04 Thread James Yonan
> Out of 2^56 DES keys, there are four weak keys and 12 semi-weak keys. > The odds of getting a weak key are incredibly slight. Most people > don't bother to check, and it isn't considered a security risk. True, weak or semi-weak keys are improbable. I was thinking more about maintaining proper

[PATCH] Undefined identifiers in objects.txt

2002-04-04 Thread Svenning Sorensen
Hello, I was in for a surprise when I added some custom objects into objects.txt. Since I wanted to use our private enterprises OIDs, I used the form: enterprises 1527 1 : myobj : My Object (same form as the dcObject already in there) However, "enterprises" is undefined, so my obj

Re: VxWorks and OPEN SSL questions -

2002-04-04 Thread Bill Pringlemeir
Praveen> Hi I am building an openssl image on to the Vxworks plaform. [snip] Praveen> My Priority is reduce the image size , as this is very Praveen> crtitical in RTOS. My Questions are : Crypto directory is This is more of an application question than development. The answer is quite sim

Re: [PATCH] Undefined identifiers in objects.txt

2002-04-04 Thread Lutz Jaenicke
On Thu, Apr 04, 2002 at 12:23:26PM +0200, Svenning Sorensen wrote: > Since I wanted to use our private enterprises OIDs, I used the form: > > enterprises 1527 1: myobj : My Object > > (same form as the dcObject already in there) > However, "enterprises" is undefined, so my object end

Re: [PATCH] Undefined identifiers in objects.txt

2002-04-04 Thread Richard Levitte - VMS Whacker
From: Svenning Sorensen <[EMAIL PROTECTED]> sss> I was in for a surprise when I added some custom objects into objects.txt. sss> sss> Since I wanted to use our private enterprises OIDs, I used the form: sss> sss> enterprises 1527 1 : myobj : My Object sss> sss> (same form as the dcObje

Limiting key size

2002-04-04 Thread Baber Amin
Hi folks, how can one limit and enforce the the key size that can be generated and used by openSSL and related utilities. The enforcement has to happen on multiple levels, 1. At generation. 2. Loading keys into the context. I am presuming that the ciphers can be limited to a lower or higher

Blocking and non-blocking IO

2002-04-04 Thread Baber Amin
Folks, where can I get more info on blocking and non-blocking IO modes that openSSL operates in? Thanks Baber :) __ OpenSSL Project http://www.openssl.org Development Mailing List

Re: Limiting key size

2002-04-04 Thread Richard Koenning
At 11:54 04.04.2002 -0700, you wrote: >Hi folks, how can one limit and enforce the the key size that can be >generated and used by openSSL and related utilities. The enforcement >has to happen on multiple levels, > >1. At generation. See http://www.openssl.org/docs/apps/openssl.html >2. Load

[no subject]

2002-04-04 Thread yves daignaux
Bonjour, I am trying to install Openssl on my computer: a fatal error return happens : making all in crypto/sha... cc -I.. -I../../include -DTHREADS -pthread -DDSO_DLFCN -DHAVE_DLFCN_H -std1 -tune host -fast -readonly_strings -c sha_dgst.c Fatal: Insufficient virtual memory to continue comp

Re: [PATCH] Undefined identifiers in objects.txt

2002-04-04 Thread Svenning Sorensen
At 20:40 04-04-2002, Richard Levitte - VMS Whacker wrote: >To be perfectly honest, I think you're dong this the wrong way. I >assume you're using the openssl command to do stuff, and in the case, >the right thing is to have the desired extra OIDs in openssl.cnf. [snip] >If you're building an a

Name space collision

2002-04-04 Thread Steven Bade
We've created in the openCryptoki project a software token which uses openSSL's crypto routines... When running under the iplanet regression test suite we get a core dump in the key generation code... Tracing it down, the crash occurs in the SHA1_Update... one of the community membe

Re: Name space collision

2002-04-04 Thread Tom Wu
Steven Bade wrote: > We've created in the openCryptoki project a software token which > uses openSSL's crypto routines... When running under the iplanet > regression test suite we get a core dump in the key generation code... > Tracing it down, the crash occurs in the SHA1_Update... one

Looking for a current SSLWSock.zip

2002-04-04 Thread David Lyon
I'm looking for an old SSLWSock.zip file as shown here. I've tried google and altavista but all the links are long dead. Can anyone help me locate a url to this file? [ssl-users] SSL socket for Delphi 3 Jan Tomasek ([EMAIL PROTECTED]) Mon, 31 Aug 1998 20:28:17 +0200 a.. Messages sorted by: [ d

Re: Looking for a current SSLWSock.zip

2002-04-04 Thread Doug Kaufman
On Fri, 5 Apr 2002, David Lyon wrote: > I'm looking for an old SSLWSock.zip file as shown here. I've tried google > and altavista but all the links are long dead. Can anyone help me locate a > url to this file? > [ssl-users] SSL socket for Delphi 3 > Jan Tomasek ([EMAIL PROTECTED]) Did you try J

Re: Looking for a current SSLWSock.zip

2002-04-04 Thread David Lyon
Thanks Doug, - Original Message - From: "Doug Kaufman" <[EMAIL PROTECTED]> To: "David Lyon" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Friday, April 05, 2002 3:52 PM Subject: Re: Looking for a current SSLWSock.zip > On Fri, 5 Apr 2002, David Lyon wrote: > > > I'm looking for an o

Re: your mail

2002-04-04 Thread Erwann ABALEA
On Thu, 4 Apr 2002, yves daignaux wrote: > a fatal error return happens : > > > making all in crypto/sha... > cc -I.. -I../../include -DTHREADS -pthread -DDSO_DLFCN -DHAVE_DLFCN_H -std1 -tune >host -fast -readonly_strings -c sha_dgst.c > Fatal: Insufficient virtual memory to continue compilatio

Re: EVP & DES, was: EVP_CipherInit() doesn't check for weak DES keys (0.9.6)

2002-04-04 Thread John Viega
On Thu, Apr 04, 2002 at 04:07:47AM -0700, James Yonan wrote: > > I was thinking more about maintaining proper key parity. Does a client of > EVP need to worry about making sure that if DES is the underlying cipher, > that passed keys have the proper parity? Generally, people just ignore the par