"Best" Ciphers?

1999-03-25 Thread Juergen Rensen
Hi everyone, I was wondering if there is something like a "best" cipher to use, ie. which one is the fastest, which one the most secure, which one the best compromise, etc. I checked the mail archive and couldn't find anything on that topic. If anyone knows of any books or FAQs where I can fi

Re: "Best" Ciphers?

1999-03-25 Thread Francois
RC4-SHA or RC4-MD5 is very secure (128bits) and fast , comparing to triple-DES which is one of the most secure (168bits) but also much slower than RC4... A pretty common cipher suite used is RC4-MD5 with RSA for Key Exchange (I prefer RC4-SHA w/ RSA for Kx) Just an opinion of course :) --fra

Re: -DNOPROTO excludes IS_{SEQUENCE,SET}

1999-03-25 Thread Ulrich Kroener
Hi! Wasn't it decided that NOPROTO would be a thing of the past because much of the new stuff is ANSI C? Ulrich --- "Ralf S. Engelschall" <[EMAIL PROTECTED]> wrote: > > In article <[EMAIL PROTECTED]> you wrote: > > > > I compiled 0.9.2b and at first forgot to run Configure, which > > brought

Problems to compile openssl

1999-03-25 Thread Detlef Schmier
Hello, I try to compile openssl-0.9.2b on "Digital UNIX V4.0E (Rev. 1091)" using the normal C-compiler. Make stops to load openssl after all libraries are compiled: rm -f openssl cc -o openssl -DMONOLITH -I../include -tune host -O4 -readonly_strings openssl.o verify.o asn1pars.o req.o dgst.o

RE: "Best" Ciphers?

1999-03-25 Thread olga
Hi, SSLeay Programmer Reference has performance characteristics: http://www.psy.uq.oz.au/~ftp/Crypto/ssl.html Also there is a cryptographic lib comparison at: http://www.homeport.org/~adam/crypto/ Olga Antropova. On 25-Mar-99 Juergen Rensen wrote: > Hi everyone, > > I was wondering if there

Re: Problems to compile openssl

1999-03-25 Thread Niels Poppe
Detlef Schmier wrote: > > Hello, > > I try to compile openssl-0.9.2b on "Digital UNIX V4.0E (Rev. 1091)" using > the normal C-compiler. > > Make stops to load openssl after all libraries are compiled: > > ld: > Unresolved: > bn_div_words > *** Exit 1 > Stop. > > Please advice > There are

Re: Problems to compile openssl

1999-03-25 Thread Niels Poppe
I just wrote: > > Detlef Schmier wrote: > > > > bn_div_words > > *** Exit 1 > I'll include the original article from Holger Reiff who submitted > the patch, and, the patch itself: Excuses to H.R. (both:) please read Hannes Reinecke there. > > Date: Tue, 23 Mar 1999 10:37:28 +0

Creating and administrating local CA's

1999-03-25 Thread Steffen Dettmer
Hi, I'm setting up a CA useing openssl and mod_ssl for Apache. I'm writing some perl scripts for standard jobs, like: - Certificate verifying with Netscape (nsRevocationUrl in v3 SSL ext) - Certificate distributing (a cert list sorted by DN hierachie) where an user may download all by the CA s

Re: Creating and administrating local CA's

1999-03-25 Thread Michael Ströder
Steffen Dettmer wrote: > > I'm setting up a CA useing openssl and mod_ssl for Apache. > > I'm writing some perl scripts for standard jobs, like: > - Certificate verifying with Netscape (nsRevocationUrl in v3 SSL ext) > - Certificate distributing (a cert list sorted by DN hierachie) > where an

Re: Creating and administrating local CA's

1999-03-25 Thread Lars Eggert
-BEGIN PGP SIGNED MESSAGE- steffen> Hi, I'm setting up a CA useing openssl and mod_ssl for Apache. ... steffen> I try to make the scripts easy to use, and easy to configure. And steffen> they have error handlers :). If there is someone interested in the steffen> sources, please dr

Re: "Best" Ciphers?

1999-03-25 Thread Chris Jalbert
On 3/25/1999 12:02 PM, Juergen Rensen enlightened me with the following: >I was wondering if there is something like a "best" cipher to use, ie. >which one is the fastest, which one the most secure, which one the best >compromise, etc. > >I checked the mail archive and couldn't find anything on

Re: Creating and administrating local CA's

1999-03-25 Thread patl
> > I'm setting up a CA useing openssl and mod_ssl for Apache. > > > > I'm writing some perl scripts for standard jobs, like: > > - Certificate verifying with Netscape (nsRevocationUrl in v3 SSL ext) > > - Certificate distributing (a cert list sorted by DN hierachie) > > where an user may downl

Re: "Best" Ciphers?

1999-03-25 Thread Martin Murray
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > > My favorite book (and a bible for us wee dabblers) is Bruce Schneier's > Applied Cryptography. In checking out his web page at > http://www.counterpane.com, I noticed he has French, German, and Polish > editions. I bought my copy thru Amazon.c

FTP download, was: Creating and administrating local CA's

1999-03-25 Thread Steffen Dettmer
Hi, since there're some people interested in some scripts for ca's, here you may download a first beta: (anonymous FTP) ftp://lnx40.tfh-berlin.de/pub/ca/ca-beta-03-25-99.tgz oki, Steffen __ OpenSSL Project

OpenSSL 0.9.2b build failed on FreeBSD 3.1-S with RSAref

1999-03-25 Thread Ludwig Pummer
This is the third day I've been trying to get OpenSSL to build properly with rsaref-2.0. I'm doing this all so I can install mod_ssl for my Apache. uname -a (after adjusting for line length): FreeBSD toy.chip-web.com 3.1-STABLE FreeBSD 3.1-STABLE #0: Thu Mar 4 18:28:40 PST 1999 [EMAIL PROTECTED