[openssl-users] conversion of RAND_bytes to rand in fips apporved way

2018-07-25 Thread Sudarshan Soma
Hi, we have linked FIPS compliant openssl version against our applications. Now few applications are using libc rand function. For FIPS compliance, applications have to call approved SP 800-90A DRBG implementation. I was planning to replace libc rand with RAND_bytes for the same. But rand()

Re: RSA/DSA key bit strength

2009-08-16 Thread Sudarshan Soma
would be des3. It doesnt mean RSA works in modes like CBC etc. On Thu, Aug 13, 2009 at 3:49 AM, Sudarshan Soma sudarshan...@gmail.com wrote: On Thu, Aug 13, 2009 at 2:22 PM, carlyo...@keycomm.co.uk wrote: On Thu 13/08/09 4:46 AM , Sudarshan Soma sudarshan...@gmail.com sent: Hi Can anone

Re: RSA/DSA key bit strength

2009-08-13 Thread Sudarshan Soma
On Thu, Aug 13, 2009 at 2:22 PM, carlyo...@keycomm.co.uk wrote: On Thu 13/08/09 4:46 AM , Sudarshan Soma sudarshan...@gmail.com sent: Hi Can anone please clarify this data with OPENSSL 0.9.8i: RSA uses key ranges from 768-2048 and can operate only in CBC mode DSA uses key length of 1024

RSA/DSA key bit strength

2009-08-12 Thread Sudarshan Soma
Hi Can anone please clarify this data with OPENSSL 0.9.8i: RSA uses key ranges from 768-2048 and can operate only in CBC mode DSA uses key length of 1024 and operates only in CBC Thanks and Regards, Sudarshan __ OpenSSL

Encryption Algs/Cipher modes supported

2009-08-08 Thread Sudarshan Soma
Hi, We are planning to use openssl libraries in our software. I have to find all the supported encryption algs supported, Encryption Mode Support of each and so on. I think all this information is available with openssl list-cipher-commands. http://www.openssl.org/docs/apps/enc.html Please let

select before SSL_read call

2009-05-12 Thread Sudarshan Soma
Hi All, This is a basic question. But can anyone please clarify if this is correct? These are the steps iam doing for a read on SSL socket for http requests. I ) wait on select call on socket descriptor, until read hit occurs (on timeout param) 2) read incrementally with SSL_read() from that