get_cipher_engine for ECC Engines?

2013-10-28 Thread Joshua Datko
I'd like to know if the engine I've loaded supports certain algorithms. I'm using ENGINE_get_cipher_engine(int nid) with various ciphers and that is working great. Now, I'd like to test if the engine supports ECDH and/or ECDSA. But, I'd like to test for specific curve support. I see the get_def

Re: Differences on output between OpenSSL and CryptoTool

2013-10-28 Thread Viktor Dukhovni
On Mon, Oct 28, 2013 at 11:48:22PM +0100, Luis Rocha wrote: > + Filename topsecret.txt which only contains the character 'a' > + Encrypt it with DES using CBC mode with key and iv = 0 produces the > result '32ea a0fa 4f77 fb92' > > user@debian:~$ openssl enc -des-cbc -K 0 -iv 0 -nosalt -in topsec

Differences on output between OpenSSL and CryptoTool

2013-10-28 Thread Luis Rocha
Hello, I'm trying to compare the results of the openssl tool with the cryptool 1.4.31 + Filename topsecret.txt which only contains the character 'a' + Encrypt it with DES using CBC mode with key and iv = 0 produces the result '32ea a0fa 4f77 fb92' user@debian:~$ xxd topsecret.txt 000: 61

Re: openssl ca -revoke why need CA parm

2013-10-28 Thread Stefan H. Holek
On 28.10.2013, at 11:56, redpath wrote: > I would like to know why the openssl CA command to revoke a cert > (myfiletorevoke) > needs the CA cert other than the cert I want to revoke. This is to prove the authority of the operator. > openssl ca -revoke myfiletorevoke -keyfile cakey -cert ca

Re: DN attributes questions, and OpenSSL/GnuPG interoperability

2013-10-28 Thread Stefan H. Holek
On 25.10.2013, at 18:41, Ted Byers wrote: > certificates, I want the user's first and last names, mailing address, > phone, &c. in the certificates produced. How do I get tht information > into the CSR/CRT files? You have to configure the attributes you want to be prompted for: http://www.openss

openssl ca -revoke why need CA parm

2013-10-28 Thread redpath
I would like to know why the openssl CA command to revoke a cert (myfiletorevoke) needs the CA cert other than the cert I want to revoke. openssl ca -revoke myfiletorevoke -keyfile cakey -cert cacert -passin pass:CApass -config myconfig I noticed that the command does not modify the cert I w