Re: Error while encryption or Decrypting

2007-07-29 Thread Brad Hards
On Saturday 28 July 2007 01:49, Pink Princess wrote: > *** glibc detected *** /home/noura/workspace/256OpenSSL/apps/openssl: > double free or corruption (!prev): 0x0820d170 *** This is the most likely problem - you are free()ing memory that has already been free()d. Maybe you are free()ing memory

Re: Examples of blowfish.h code for C?

2007-11-03 Thread Brad Hards
On Friday 02 November 2007 12:13, Joel Christner wrote: > > Please pardon the newbie question. I was curious if anyone had any links > > or references that they could point me to for more details on how to use > > blowfish.h with C? I've gone through the man pages but was hoping for > > something

Weird indenting in X509_signature_print()

2006-02-02 Thread Brad Hards
In openssl-0.9.7g/crypto/asn1/t_509.c, there is this function: int X509_signature_print(BIO *bp, X509_ALGOR *sigalg, ASN1_STRING *sig) { unsigned char *s; int i, n; if (BIO_puts(bp,"Signature Algorithm: ") <= 0) return 0; if (i2a_ASN1_OBJECT(bp, sigalg->algorit

PKITS test?

2006-02-03 Thread Brad Hards
Has anyone tried the PKITS suite: http://csrc.nist.gov/pki/testing/x509paths.html against OpenSSL? I'm planning to use some of those tests, and it would help if I knew what tests are known to fail. Brad pgpnrbtMc9Fjw.pgp Description: PGP signature

PKCS7_verify() with zero length input

2006-04-13 Thread Brad Hards
I'm trying to do detached CMS signatures and verification using the PKCS7_sign() and PKCS7_verify() functions. It appears to work OK, except that my test case for a zero length array fails to verify() - looks like the signature is OK though. The documentation suggests that PKCS7_verify() isn't

Re: PKCS7_verify() with zero length input

2006-04-13 Thread Brad Hards
On Thursday 13 April 2006 22:26 pm, Dr. Stephen Henson wrote: > On Thu, Apr 13, 2006, Brad Hards wrote: > > I'm trying to do detached CMS signatures and verification using the > > PKCS7_sign() and PKCS7_verify() functions. It appears to work OK, except > > that my test ca

Re: Using MD5 in FIPS OpenSSL for RADIUS support

2006-04-16 Thread Brad Hards
On Sunday 16 April 2006 22:28 pm, Hagai Yaffe wrote: > I am using OpenSSL version 0.9.7d for cryptographic needs of my > application, among other uses I am using MD5 to implement RADIUS client. > I would like to use the FIPS compliant version of OpenSSL but MD5 is not > one of the certified algorit

Re: Phantom Domain Name Mismatch?

2006-04-21 Thread Brad Hards
On Friday 21 April 2006 06:23 am, Fran Fabrizio wrote: > "You have attempted to establish a connection to imap.cis.uab.edu.   > However, the security certificate presented belongs to imap.cis.uab.edu." Is that exactly how it is written? If so, you might have signed the certificate with a FQDN (end

Re: OCSP

2006-05-11 Thread Brad Hards
On Thursday 11 May 2006 23:38 pm, John Pattern wrote: > I want to generate a simple OCSP request. What are the steps I must > follow using OpenSSL? Thank you for your help. There is an openssl tool to do so - see: http://www.openssl.org/docs/apps/ocsp.html There is some detail, and a test server a

Re: How to distinguish between RSA and DSA keys in certificates?

2006-05-14 Thread Brad Hards
On Sunday 14 May 2006 18:54 pm, sefi wrote: > If anyone knows a way how to load a certificate from a file and obtain > it's X509* I would be glad. PEM_read_bio_X509() Brad pgp9HIS1bW880.pgp Description: PGP signature

Re: api for RSA

2006-05-15 Thread Brad Hards
On Monday 15 May 2006 17:44 pm, you wrote: > Hi all, > I have a quick question. Suppose i am doing RSA crypto. I cant seem to > figure out how i can choose a particular private key/public key. The > only api that seems to be provided is rsa_generate_key and the man > page says use the given api to

Re: man pages of PKCS12

2006-10-28 Thread Brad Hards
On Saturday 28 October 2006 01:58, Alexis Lefort wrote: > I can't find much information about parsing a PKSC12 file, or testing > the content of a file to know if it is PEM or PKCS12. Do you want to do this programmatically, or from the command line. > Where could I find that please? man pkcs12 wi

EVP_DecryptUpdate returns zero length

2004-11-15 Thread Brad Hards
In a larger application (Qt Cryptographic Architecture), I'm trying to wrap some OpenSSL crypto primitives in C++. However I'm having a problem with EVP_DecryptUpdate(). I've done up a quick'n'dirty test case, see below. Now for EVP_EncryptUpdate, this gives me 16. But for EVP_DecryptUpdate(), it

Re: HMAC-128

2004-11-23 Thread Brad Hards
On Wed, 24 Nov 2004 02:34 am, Elie Lalo wrote: > I know that OpenSSL has the following HMAC(EVP_sha1 (), ) which > supports 160 bits. But does OpenSSL support HMAC-128 as well? If yes, could > you please tell me where/how I can get information about it. You should be able to use whatever MAC al

Re: OpenSSL Window Platform

2004-12-22 Thread Brad Hards
On Thu, 23 Dec 2004 04:13 am, Amy Wong wrote: > I really appreciate if you can show me where to get the Open SSL in window > platform (or if there is any documentation out there). I recently bought the OpenSSL book from O'Reilly - http://www.oreilly.com/catalog/openssl/ Not fully up to date with

Re: SSL (or alike) over UDP

2005-01-14 Thread Brad Hards
On Fri, 14 Jan 2005 21:10 pm, Eduardo Pérez wrote: > Do you know if it's possible to use SSL (or some other protocol) over > UDP running totally in user space. Not possible to use SSL. Some other protocol is potentially possible, but you haven't told us what you are trying to accomplish, so it har

Re: DH parameters

2005-01-24 Thread Brad Hards
On Tue, 25 Jan 2005 06:50 am, Michael D'Errico wrote: > Michael D'Errico wrote: > > How often should a server generate new DH parameters? > > Is this a dumb question? Sorry if it is. 1. 36 hours isn't much time to wait for a response. 2. You broke threading, rather than starting a new thread. 3. I

Seeking permission to use "openssl" in a product name

2005-03-13 Thread Brad Hards
I am working on an cryptographic abstraction layer for Qt, imaginatively called the Qt Cryptographic Architecture (QCA). One of the back-end plugins that is in development links to OpenSSL. Right now, the directory name is "qca-openssl". When it gets released, each backend will probably be relea

Re: Seeking permission to use "openssl" in a product name

2005-03-14 Thread Brad Hards
On Mon, 14 Mar 2005 07:27 pm, Ted Mittelstaedt wrote: > Hmm - well this doesen't look to me like a request for permission, merely > a request for opinion of whether or not you need to request permission. Sorry, that wasn't the intent. > So, in answer to that, no.  You must request permission to do

Valgrind suppressions?

2005-05-15 Thread Brad Hards
I'm coming across a lot of valgrind warnings for the BN code. Eg: ==20718== Conditional jump or move depends on uninitialised value(s) ==20718==at 0x4E34666D: bn_mul_recursive (bn_mul.c:111) ==20718==by 0x4E3475D2: BN_mul (bn_mul.c:708) ==20718==by 0x4E34D1CC: BN_mod_mul_montgomery (bn

Re: Valgrind suppressions?

2005-05-19 Thread Brad Hards
On Mon, 16 May 2005 02:04 am, Nils Larsch wrote: > a lot of these warnings are caused by the fact that openssl uses > uninitialized memory when creating random numbers etc. . They should > be harmless but you may try to build openssl with the "-DPURIFY" to > reduce the number of warnings Thanks Nil

Determining key size for DSA and DH?

2005-06-05 Thread Brad Hards
I'm trying to determine the length (in bits) for my DSA and DH keys. I'm happily using RSA_size() for RSA keys, and I assumed that DSA_size and DH_size would do equivalent operations (based on the man page for BN_size_bits, which states 'If you want to know the "key size" of such a key, either

Re: valgrind errors

2005-06-05 Thread Brad Hards
On Wed, 1 Jun 2005 23:31 pm, [EMAIL PROTECTED] wrote: > Hello all, > > I develeopped a server which seems to work quite fine. When I use > Valgrind to check for problems, it returns me thousands of problems wich > seems to be caused by the OpenSSL librairie! > follows some of the returns: There is

Re: Determining key size for DSA and DH?

2005-06-05 Thread Brad Hards
On Sun, 5 Jun 2005 21:20 pm, Nils Larsch wrote: > > Is there a way to determine the keylength for DSA keys and DH keys? > > in case of a EVP_PKEY object EVP_PKEY_bits, otherwise As it turns out, I do have a EVP_PKEY, so this is just what I needed. > BN_num_bits(dsa->p). But as the "NOTES" section

Re: Determining key size for DSA and DH?

2005-06-05 Thread Brad Hards
On Sun, 5 Jun 2005 22:03 pm, Brad Hards wrote: > On Sun, 5 Jun 2005 21:20 pm, Nils Larsch wrote: > > > Is there a way to determine the keylength for DSA keys and DH keys? > > > > in case of a EVP_PKEY object EVP_PKEY_bits, otherwise > > As it turns out, I do have a EV