Re: using Open SSL on MIPS platform

2009-11-08 Thread Akira Amore
Ah! That makes so much sense, I wonder why I did not think of it :-) thanks a lot for your help Akira John R Pierce wrote: Akira Amore wrote: Hi, I'm trying to build rdesktop on a Fedora Core 8 system using Tuxbuilder-1.0, targetted for a MIPS embedded system. The rdesktop build throws the

Re: [Q] How to encrypt using DES?

2009-11-08 Thread JongAm Park
Thank you for your reply. Is there any tutorial or code samples? Thank you. JongAm Park On Nov 8, 2009, at 3:42 PM, Dr. Stephen Henson wrote: EVP_EncryptInit_ex

Re: Memory leaks...

2009-11-08 Thread Wim Lewis
On Nov 7, 2009, at 2:50 PM, barcaroller wrote: I'm getting some memory leaks when I use OpenSSL. I was not able to get rid of these leaks, even when I use EVP_cleanup() and ERR_free_strings() at the end of my program. [] ==27769== 24 bytes in 1 blocks are still reachable in loss r

Re: Revival of ERR_free_state_table / alt solution

2009-11-08 Thread Wim Lewis
On Oct 7, 2009, at 8:19 AM, Thomas Harning Jr. wrote: I'm writing a browser and a library that use OpenSSL for cryptography support. I want to best be able to fully cleanup state when my plugin/library is unloaded, however it seems to me that it's not possible to clear out all thread-associated

Re: [Q] How to encrypt using DES?

2009-11-08 Thread Dr. Stephen Henson
On Sun, Nov 08, 2009, JongAm Park wrote: > Hello. May I ask how to encrypt a key in DES? > > According to its MAN page, it says to generate a DES_key_schedule first, > and do the actual encryption. > Actually I'd say you're beginning from the wrong place. The low level APIs like DES shouldn't re

Re: using Open SSL on MIPS platform

2009-11-08 Thread John R Pierce
Akira Amore wrote: Hi, I'm trying to build rdesktop on a Fedora Core 8 system using Tuxbuilder-1.0, targetted for a MIPS embedded system. The rdesktop build throws the following error: /usr/include/openssl/opensslconf.h:27:2: error: #error "This openssl-devel package does not work your arch

[Q] How to encrypt using DES?

2009-11-08 Thread JongAm Park
Hello. May I ask how to encrypt a key in DES? According to its MAN page, it says to generate a DES_key_schedule first, and do the actual encryption. So, I called functions like this. DES_cblock aKey; DES_random_key( &aKey ); DES_key_schedule keySchedule; int result; result = DES_set_key_

[Q] Tutorial or Explanation how to use OpenSSL library functions?

2009-11-08 Thread JongAm Park
Hello, I am just a beginner at using OpenSSL library. I write in C/C++ and Objective-C. After looking up the OpenSSL web site, I found out that there was no document for studying how to use it. Is there any good source like sample codes, tutorial and so on? Thank you in advance. JongAm Park __

[Q] Where is this DES_check_key flag can be set?

2009-11-08 Thread JongAm Park
Hello. I tried using OpenSSL library for encrypting a string in DES using OpenSSL. However, I found out that it was very difficult to understand what to do by reading MAN page for the DES portion of the OpenSSL. One thing I can't figure out is : DES_set_key() works like DES_set_key_checke

using Open SSL on MIPS platform

2009-11-08 Thread Akira Amore
Hi, I'm trying to build rdesktop on a Fedora Core 8 system using Tuxbuilder-1.0, targetted for a MIPS embedded system. The rdesktop build throws the following error: /usr/include/openssl/opensslconf.h:27:2: error: #error "This openssl-devel package does not work your architecture?" Here are the

Re: Padding mode for RSA_private_decrypt()...

2009-11-08 Thread Mounir IDRASSI
Hi, Which version of SSL/TLS are you talking about? To my knowledge, SSLV2, SSLV3 and TLS1.0 all use PKCS#1 Block Type 2 padding (in case of SSL V2 rollback, that last eight padding bytes are not random and are set to 0x03 but this special case is detect at the protocol level). Cheers, -- Mo

Re: Padding mode for RSA_private_decrypt()...

2009-11-08 Thread Michael S. Zick
On Sun November 8 2009, barcaroller wrote: > > "Mounir IDRASSI" wrote in message ... > > > You simply can't guess the padding mode if you don't know it in advance. > > Imagine the security consequences if this was possible : it would mean > > that an attacker can have information about the clea

Bug up in openssl 0.9.8

2009-11-08 Thread The Doctor
How does this effect openssl 1+ ? -- Member - Liberal International This is doc...@nl2k.ab.ca Ici doc...@nl2k.ab.ca God, Queen and country! Never Satan President Republic! Beware AntiChrist rising! http://twitter.com/rootnl2k http://www.myspace.com/502748630 For the latest World News go to htt

Re: Padding mode for RSA_private_decrypt()...

2009-11-08 Thread barcaroller
"Mounir IDRASSI" wrote in message ... > You simply can't guess the padding mode if you don't know it in advance. > Imagine the security consequences if this was possible : it would mean > that an attacker can have information about the clear text without having > access to the private key!! O

Re: CryptoAPI calls failing in rand_win on Windows 7

2009-11-08 Thread sandeep kiran p
>RAND_poll runs very quickly with a near-empty heap. Do you mean that the calls to Heap32First, Heap32Next, Heap32ListFirst, Heap32ListNext are failing? Can you check the return values from these calls? (using GetLastError?). In any case, the heap traversals are bounded by the 1 sec limit. Even if

Re: Linking and execution problems with a FIPS-capable OpenSSL distribution

2009-11-08 Thread Michael S. Zick
Any reason for the double posting? Wouldn't just one address do? Mike On Fri November 6 2009, Daugherty wrote: > Synopsis: > > > Linking and execution problems with a FIPS-capable OpenSSL distribution. > > System: > -- > > openSUSE 11.0 (i586) > Linux version 2.6.25.20-0.4-pae > g

Linking and execution problems with a FIPS-capable OpenSSL distribution

2009-11-08 Thread Daugherty
Synopsis: Linking and execution problems with a FIPS-capable OpenSSL distribution. System: -- openSUSE 11.0 (i586) Linux version 2.6.25.20-0.4-pae gcc (SUSE Linux) 4.3.1 OpenSSL 0.9.8g 19 Oct 2007 (currently installed) Includes are in /usr/include/openssl Libs are in /usr/lib F

Linking and execution problems with a FIPS-capable OpenSSL distribution

2009-11-08 Thread Daugherty
Synopsis: Linking and execution problems with a FIPS-capable OpenSSL distribution. System: -- openSUSE 11.0 (i586) Linux version 2.6.25.20-0.4-pae gcc (SUSE Linux) 4.3.1 OpenSSL 0.9.8g 19 Oct 2007 (currently installed) Includes are in /usr/include/openssl Libs are in /usr/lib F