RE: New FIPS 140-2 validation underway

2011-01-11 Thread Yair Elharrar
If you need a working CTR_DRBG implementation compliant with SP 800-90, I can recommend Henric Jungheim's code found at http://henric.info/random/ ; attached is a quick adaptation for OpenSSL. It passes NIST's test vectors (http://csrc.nist.gov/groups/STM/cavp/documents/drbg/DRBGTestVectors.zip)

Re: New FIPS 140-2 validation underway

2011-01-11 Thread Dr. Stephen Henson
On Tue, Jan 11, 2011, Paul Suhler wrote: > > > = > > Are you aware of the speed complaints and speculations about a trapdoor > in Dual_EC_DRBG? > > http://en.wikipedia.org/wiki/Dual_EC_DRBG > Yes, I'm aware of them. The DRBG will most likely be cipher or hash based,

RE: New FIPS 140-2 validation underway

2011-01-11 Thread Paul Suhler
-Original Message- From: owner-openssl-...@openssl.org [mailto:owner-openssl-...@openssl.org] On Behalf Of Steve Marquess Sent: Tuesday, January 11, 2011 7:46 AM To: openssl-dev@openssl.org Subject: Re: New FIPS 140-2 validation underway Xiao, Ying wrote: > Hi Steve, > > Sorry for the s

[openssl.org #2427] [PATCH] fix Borland C++ 5.5 redefine

2011-01-11 Thread Guenter via RT
Borland C++ 5.5 warns about: .\crypto\rand\randfile.c: Warning W8017 d:\prg\Bcc55\include\sys/stat.h 34: Redefinition of 'S_IFMT' is not identical Warning W8017 d:\prg\Bcc55\include\sys/stat.h 35: Redefinition of 'S_IFDIR' is not identical and: .\crypto\x509\by_dir.c: Warning W8017 d:\prg\Bcc55\

RE: New FIPS 140-2 validation underway

2011-01-11 Thread Xiao, Ying
Steve, Great news. Will the new PRNG be released by the end of 2011? Thank you. Ying -Original Message- From: owner-openssl-...@openssl.org [mailto:owner-openssl-...@openssl.org] On Behalf Of Steve Marquess Sent: Tuesday, January 11, 2011 10:46 AM To: openssl-dev@openssl.org Subject: Re

[openssl.org #2429] [PATCH] fix Borland C++ 5.5 compilation /3

2011-01-11 Thread Guenter via RT
Attached patches add: - a compiler switch to suppress warnings about missing return values which are wrong since the functions do return but inside switch cases which bcc32 doesnt seem to detect correctly. - assembler detection (nasm vs. nasmw) and for 1.0.0 branch: - add crypt32.lib needed for

[openssl.org #2428] [PATCH] fix Borland C++ 5.5 compilation /2

2011-01-11 Thread Guenter via RT
Borland C++ 5.5 does not use underscored symbols for stat & friends: --- crypto/rand/randfile.c.orig Sat Jun 12 14:18:55 2010 +++ crypto/rand/randfile.c Tue Jan 11 15:48:11 2011 @@ -81,7 +81,7 @@ # include #endif -#ifdef _WIN32 +#if defined(_WIN32) && !defined(__BORLANDC__) #define st

Re: New FIPS 140-2 validation underway

2011-01-11 Thread Steve Marquess
Xiao, Ying wrote: Hi Steve, Sorry for the same questions asked many times by Openssl users. Will the new random number generator specified in FIPS SP80-900 be included or planned to be include in the openssl v1.2.2 modules. I don't see it in the source code. Openssl is the best of all the secu

Re: New FIPS 140-2 validation underway

2011-01-11 Thread Dr. Stephen Henson
On Tue, Jan 11, 2011, Xiao, Ying wrote: > Hi Steve, > > Sorry for the same questions asked many times by Openssl users. > > Will the new random number generator specified in FIPS SP80-900 be > included or planned to be include in the openssl v1.2.2 modules. I don't > see it in the source code. >

RE: New FIPS 140-2 validation underway

2011-01-11 Thread Xiao, Ying
Hi Steve, Sorry for the same questions asked many times by Openssl users. Will the new random number generator specified in FIPS SP80-900 be included or planned to be include in the openssl v1.2.2 modules. I don't see it in the source code. Openssl is the best of all the security libraries we tr

Re: [openssl.org #2426] [PATCH] fix Borland C++ 5.5 compilation

2011-01-11 Thread Guenter via RT
Am 11.01.2011 14:40, schrieb Guenter via RT: > Borland C++ 5.5 does not use underscored _ftime and _timeb, therefore > code in ./crypto/bio/bss_dgram.c and ./ssl/d1_lib.c breaks. The quick > hack to fix this would be to add defines in e_os.h in the __BORLANDC__ > block: > --- e_os.h.orig Mon May 31

Re: Source code for functions ...

2011-01-11 Thread Patrick Patterson
Hi Todor: On 2011-01-10, at 11:08 AM, t_todoro...@mail.bg wrote: > Could you please help me to find source code (or definitions) of the > following functions ? > What you are missing is actually linking with the right libraries - Not sure what your platform is though from that error message.

[openssl.org #2426] [PATCH] fix Borland C++ 5.5 compilation

2011-01-11 Thread Guenter via RT
Borland C++ 5.5 does not use underscored _ftime and _timeb, therefore code in ./crypto/bio/bss_dgram.c and ./ssl/d1_lib.c breaks. The quick hack to fix this would be to add defines in e_os.h in the __BORLANDC__ block: --- e_os.h.orig Mon May 31 14:18:08 2010 +++ e_os.h Tue Jan 11 12:41:04 2

Source code for functions ...

2011-01-11 Thread t_todorov83
Could you please help me to find source code (or definitions) of the following functions ? ld: 0711-317 ERROR: Undefined symbol: .i2d_X509_SIG ld: 0711-317 ERROR: Undefined symbol: .d2i_X509_SIG ld: 0711-317 ERROR: Undefined symbol: .X509_SIG_free ld: 0711-317 ERROR: Undefined symbol: LONG_it

New FIPS 140-2 validation underway

2011-01-11 Thread Steve Marquess
The OpenSSL Software Foundation has a commitment for funding a FIPS 140-2 Level 1 Validation for a new and improved OpenSSL FIPS Object Module. The sponsorship for this validation comes with specific and time-sensitive requirements. The funding will be sufficient to cover the labor and expenses ne