RE: Default SSL cipher string?

2000-07-18 Thread Brian Snyder
Sorry i should have mentioned, what about for sslv3, not tls? thanx, brian > -Original Message- > From: Rene G. Eberhard (keyon) [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, July 18, 2000 3:32 PM > To: [EMAIL PROTECTED] > Subject: RE: Default SSL cipher string? > > > > Does the de

Help with Blowfish decryption... please... can this be done?

2000-05-22 Thread Brian Snyder
Hi all. In relation to a previous email i sent to the list titled 'Question about KEYS.. (EVP_BytesToKey)', I spent a while going through the code that sets up a symmetric cipher for decryption. NOTE: In my problem domain, the encryption of this data is happening on the server side of the connec

Question about KEYS.... (EVP_BytesToKey)

2000-05-16 Thread Brian Snyder
What is the purpose of this function. I have a disconnect on why this is needed as opposed to just setting a key and a IV. IE: If a user enters 'password' as his password, what good does running through the EVP_BytesToKey (or one of the specific functions like BF_set_key). I understand this

RE: RSA Patent Issues... interesting article...

2000-05-10 Thread Brian Snyder
Here's something on this note that I wonder about. Why, when the de-facto standard of internet development/protocol work is to use open (royalty-free) protocols, did the world of SSL seem to standardize on a patented algorithm such as SSL. I mean SSL is totally out there for the world to use, b

Without, RSA why doesnt it connect?

2000-05-04 Thread Brian Snyder
Hi all. When compiled without RSA, I can't seem to connect to servers. Arent they all capable of of using multiple algorithms, so shouldnt a server just negotiate down the protocol and not use RSA when my client connects? Is this possible (ive always thought it would be), does it take special

FW: SIGBUS on solaris w/ C++ wrapper class.... any ideas???... IGNORE!!

2000-05-01 Thread Brian Snyder
Sorry all I figured it out, I had my own memory leak that was screwing me up. Apologizes to all for the interruption, brian -Original Message- From: Brian Snyder Sent: Monday, May 01, 2000 5:37 PM To: Ssl (E-mail) Subject: SIGBUS on solaris w/ C++ wrapper class any ideas??? Hi

SIGBUS on solaris w/ C++ wrapper class.... any ideas???

2000-05-01 Thread Brian Snyder
Hi all, I am writing a C++ wrapper class as an interface into certain openSSL commands, and when I call SSL_write, I get a SIGBUS. I traced through with gdb and where this call takes place, I tried to 'print ssl' I get: $5 = (SSL*) 0x656e7449, then I do 'print *ssl' I get: Cannot access memory at

Q about the darkspell gadgets

2000-04-28 Thread Brian Snyder
This is a snippet of code from the darkspell gadgets. (Replace read with SSL_read and you have a reader for an SSL enabled connection). My question is why does this print out some code that is less then 4096 bytes...ever? It seems that this would not return and print the 'buf' until its read '

RE: Client Authentication??

2000-04-25 Thread Brian Snyder
rowser is > connecting to (i.e., www.acme.com does not match > www.generalwidgets.com). > > Hope this helps. > > Regards, > Al Shaver > [EMAIL PROTECTED] > > --- Brian Snyder <[EMAIL PROTECTED]> wrote: > > > > > > I have a quick question about

Client Authentication??

2000-04-24 Thread Brian Snyder
I have a quick question about client authentication. How exactly is authenticity gauranteed? If verisign (or whoever) gives one a digital ID, this is just a file on the computer. Whats to stop said person from sharing this signature and giving it to all his friends. The way I understand it

1 RAND question, and 1 crypto question

2000-04-21 Thread Brian Snyder
Hi all. I have 2 questions about the openssl library kit. 1) A beginners Q on an often talked about issue; seeding the random # generator. Would it be considered cryptographically strong to just take your executable, copy that to ~/.rnd and let it go from there. Each time it uses it, the file

HMAC with crypto.a ??

2000-04-13 Thread Brian Snyder
Hi all, I am interested in adding some encryption into a legacy app. I was looking at two different packages. One, which I'm guessing some of you might be experienced with is CryptoPP by Wei Dai. The other is OpenSSL. It looks like their is a large amount of redundancy with the two libraries a

POD doc files?

2000-04-12 Thread Brian Snyder
Hi all, what are these POD doc files? What format is that and what application is required to read this? Does there exist docs in man/info/html format? TIA, brian Brian Snyder.vcf