[openssl.org #1454] RSA key exponents different from 3 and F4

2007-01-05 Thread Annie Yousar via RT
Dear all, Bleichenbacher's attack shows that it was possible to forge a PKCS #1 v1.5 signature signed by a key using exponent 3. Unfortunately the implementation of the OpenSSL command openssl genrsa ... allows only to create keys with exponent 3 or F4. Nevertheless the new RSA key genera

Re: linux-arm hardware

2007-01-05 Thread Dr. Stephen Henson
On Fri, Jan 05, 2007, Andy Polyakov wrote: > Guys, > > I've written some ARM assembler and would like to benchmark it. So if > anybody on the list has access to linux-arm hardware, please contact me > for instructions. A lot of thanks in advance. A. I know someone: me. I have access to a XScal

Re: ccgost on DOS

2007-01-05 Thread Gisle Vanem
"Victor B. Wagner" <[EMAIL PROTECTED]> wrote: It'll be interesting to see if ccgost engine can work at all under DOS - we never intended it to be used on the platform without dynamic loading, and OpenSSL doesn't support dynamic loading, available in DJGPP 2.04. gost_eng.c has some code inside

Re: ccgost on DOS

2007-01-05 Thread Victor B. Wagner
On 2007.01.05 at 17:11:50 +0100, Gisle Vanem wrote: > "Victor B. Wagner" <[EMAIL PROTECTED]> wrote: > > >It'll be interesting to see if ccgost engine can work at all under DOS - > >we never intended it to be used on the platform without dynamic loading, > >and OpenSSL doesn't support dynamic load

Re: linux-arm hardware

2007-01-05 Thread Kurt Roeckx
On Fri, Jan 05, 2007 at 12:06:15AM +0100, Andy Polyakov wrote: > Guys, > > I've written some ARM assembler and would like to benchmark it. So if > anybody on the list has access to linux-arm hardware, please contact me > for instructions. A lot of thanks in advance. A. I have access to one of D

Re: [openssl.org #1454] RSA key exponents different from 3 and F4

2007-01-05 Thread Nils Larsch via RT
Annie Yousar via RT wrote: > Dear all, > Bleichenbacher's attack shows that it was possible to forge a PKCS #1 > v1.5 signature signed by a key using exponent 3. > > Unfortunately the implementation of the OpenSSL command > openssl genrsa ... > allows only to create keys with exponent 3 or

Re: [openssl.org #1454] RSA key exponents different from 3 and F4

2007-01-05 Thread Annie Yousar via RT
Nils Larsch via RT wrote: ... >> >> The included minor patch of apps/genrsa.c adds a new option for exponent >> selection to the genrsa command. ... > > principally I'm not against such a change but I wonder how useful this > feature is (or, in other words, how likely is it that a user selects >

Re: [openssl.org #1454] RSA key exponents different from 3 and F4

2007-01-05 Thread David Shambroom
Try openssl speed rsa Private key (large exponent) operations are 1-2 orders of magnitude slower than public key (small exponent), easily observed. Depending on key length and traffic volume this can be very important. --David Annie Yousar via RT wrote: Small exponents give the advantage of

RE: [openssl.org #1447] [bug] 0.9.8d: rc4 cpuid test broken on dual core cpus

2007-01-05 Thread David Schwartz
> > So HT flag is no longer HyperThreading, but something else... > > Will look into > > it... There is another place HTT flag is checked and it's AES... > yeah HT flag now basically means "multi-threading or multi-core > package"... because when amd/intel went dual core they didn't want silly >