Re: Load and unload of engines at runtime

Hi All, Could someone please help with this query? Thanks Mahendra On Thu, Apr 29, 2021 at 5:20 PM Mahendra SP wrote: > Hi All, > > We have crypto engines for offloading operations like RSA, digests and > ciphers, hmac etc. We are looking at a way to load and unload engines a

Load and unload of engines at runtime

Hi All, We have crypto engines for offloading operations like RSA, digests and ciphers, hmac etc. We are looking at a way to load and unload engines at run time. This is needed as we need to use the engine when needed for crypto operations. Else we plan to use openssl for the same. We tried, ->

Re: Need inputs for engine cleanup

Hi All, Can you please let me know any inputs on the above query? Thanks Mahendra On Mon, Nov 30, 2020 at 9:19 PM Mahendra SP wrote: > Hi All, > > We are using the openssl 1.1.1 version and using the ENGINE implementation > for some crypto operation. Engine gets loaded

Need inputs for engine cleanup

Hi All, We are using the openssl 1.1.1 version and using the ENGINE implementation for some crypto operation. Engine gets loaded dynamically and initialized successfully and we are able to use the engine. However, we plan to stop using this engine from the application side once we are done with

Question related to default RAND usage and update with engine RAND

Hi All, We are planning to use our own RAND implementation using an engine. What we observe is, during Openssl init, default RAND gets initialized to openssl RAND. Then later we initialize our engine RAND. Even though we make our RAND as default, we see that still openssl uses the initial default

Re: Decrypt error when using openssl 1.1.1b during SSL handshake

sue in hardware and return the correct data. Please suggest if you have any comments for the above info. Thanks Mahendra On Fri, Oct 30, 2020 at 7:50 PM Matt Caswell wrote: > > > On 30/10/2020 11:22, Mahendra SP wrote: > > Hi Matt, > > > > Thank you for the input

Re: Decrypt error when using openssl 1.1.1b during SSL handshake

image.png] Thanks Mahendra Please suggest. On Fri, Oct 30, 2020 at 3:32 PM Matt Caswell wrote: > > > On 30/10/2020 09:18, Mahendra SP wrote: > > Hi All. > > > > We have upgraded openssl version to 1.1.1b > > > > With this, we are seeing decryption error

Decrypt error when using openssl 1.1.1b during SSL handshake

Hi All. We have upgraded openssl version to 1.1.1b With this, we are seeing decryption error during SSL handshake for the below explained scenario. Our device acts as an SSL server. We have external hardware to offload RSA private key operations using the engine. Decryption of pre-master secret

Re: ENGINE_load_private_key does not get invoked

020 at 10:03 PM Dmitry Belyavsky wrote: > Dear Mahendra, > > On Mon, Apr 20, 2020 at 7:27 PM Mahendra SP wrote: > >> Hi Dmitry Belyavsky, >> >> Thank you for the inputs. If I understand correctly, the >> reference indicates loading the private key to engine in

Re: ENGINE_load_private_key does not get invoked

Dmitry Belyavsky wrote: > Dear Mahendra, > > Take a look at the load_key function in the apps/apps.c as a referent > example. > > On Mon, Apr 20, 2020 at 2:34 PM Mahendra SP wrote: > >> Hi All, >> >> While writing the engine implementation for private key encr

ENGINE_load_private_key does not get invoked

Hi All, While writing the engine implementation for private key encryption and decryption, I need to get the private key from external source. ENGINE_set_load_privkey_function(e, load_tpm_private_key) Above API is success. RSA structure is as below. RSA_METHOD my_rsa_struct = { "MY RSA

Regarding engine implementation for RSA and AES

Hi, We are looking at implementing an engine for RSA and AES. For AES, looking at the documentation, understand that engine will get invoked only if the application or SSL library invokes EVP based calls rather than native AES calls. Is this correct ? For RSA, is it mandatory to use EVP for

Re: Query regarding SSL_ERROR_SSL during SSL handshake

Hi Matt, Thank you for the inputs. I have one more query. Is it appropriate to check for the errno in this case and take action based on the errno values ? Thanks Mahendra On Wed, Feb 19, 2020 at 3:09 PM Matt Caswell wrote: > > > On 19/02/2020 05:16, Mahendra SP wrote: > > Hi

Query regarding SSL_ERROR_SSL during SSL handshake

Hi All, We are using Openssl version 1.0.2h. When we call SSL_do_handshake, sometimes we notice that handshake fails with error SSL_ERROR_SSL. As per the documentation for this error, it is non recoverable and fatal error. Documentation also mentions to check the error queue for further details.

Issue in CRYPTO_cbc128_encrypt due to unaligned address

Hi All, I am seeing an issue with the routine CRYPTO_cbc128_encrypt() in version 1.0.2h where, , if I have not declared STRICT_ALIGNMENT, application crashes intermittently. There was a similar query here but for CRYPTO_ctr128_encrypt.