Re: crypt(3)

2020-01-20 Thread Dr Paul Dale
Thanks for the feedback everyone. Pauli -- Dr Paul Dale | Distinguished Architect | Cryptographic Foundations Phone +61 7 3031 7217 Oracle Australia

fips mode and key management

2020-01-20 Thread Roumen Petrov
Hello, Recently I note that when build is in FIPS_MODE some functionality is lost. For instance RSA_{g|s}et_ex_data is not available. Reading the code I expect that in FIPS mode use of external keys is forbidden. Remark: ex_data is used to store reference information for external keys.

Re: crypt(3)

2020-01-20 Thread Salz, Rich
* I meant “what default makes the most sense for the passwd command line application?” * It was crypt which is deprecated. Should it be BSD’s MD5? One of the SHA2 based algorithms? Or should it produce an error if no algorithm is selected? If you change the default, then the program

Re: crypt(3)

2020-01-20 Thread Roumen Petrov
Dr Paul Dale wrote: In the deprecation efforts for 3.0, I’ve hit something in the DES code that I’d appreciate input on. There are two functions (DES_crypt and DES_fcrypt) which implement the old crypt(3) password algorithm. Once these are deprecated, they will no longer be reachable via