FIPS verification for AES XTS

2013-11-25 Thread Leon Brits
Hi, I need to perform some Known-Answer-Tests with every start-up of my system. For this I use the NIST KAT files. However for AES-XTS, one of the files uses the tweak value input of data unit sequence number. Can anybody help me to understand howto use that value from the commandline. The

[PATCH] Correct return value of BN_ucmp()

2013-11-25 Thread Yanchuan Nian
The manual says that the return value of BN_ucmp() is -1, 0 or 1. But in fact the function can return other values now. If a-top != b-top, difference between the two is returned. Signed-off-by: Yanchuan Nian ycn...@gmail.com --- crypto/bn/bn_lib.c |3 ++- 1 files changed, 2 insertions(+), 1

Change in the length parameter of the computation of the MAC header between TLS 1.0 and TLS 1.2?

2013-11-25 Thread Joshua Davies
I'm doing compatibility testing with the latest (1.0.1e) version of OpenSSL, and I've noticed a difference that I can't reconcile. When I send the client finished message, say it's: 14 00 00 0c 37 ef c3 10 b4 76 45 6f 30 b4 45 bc (that is, the client finished tag 0x14, there bytes of length

ssl handshake failure

2013-11-25 Thread dhara.desai
Hi, i am trying to create more then 40 ssl connectionson solaris10, out of them a few are stating SSL handshake failure with error as 10073:error:140943FC:SSL routines:SSL3_READ_BYTES:sslv3 alert bad record mac:s3_pkt.c:1053:SSL alert number 20 10073:error:140790E5:SSL routines:SSL23_WRITE:ssl

[openssl.org #3180] Brainpool Elliptic Curves in OpenSSL version 1.0.2 - Re: #2239: [PATCH] RFC 5639 support

2013-11-25 Thread David von Oheimb via RT
=guest Pleased to see that finally, three years later, they have been included in the upcoming version 1.0.2. - I have been able to verify this from http://mirrors.ibiblio.org/openssl/snapshot/openssl-1.0.2-stable-SNAP-20131125.tar.gz In particular since the usual NIST curves got under pressure