Re: Case-sensitive cipher names are a bad idea

2014-08-15 Thread shathawa
> Does ANYONE think that case-sensitive cipher names are good idea? > > Someone who types TLSV1:RC4-MD5 will find things working, but is likely to > be surprised by how weakly-protected they are. > > /r$ > > -- > Principal Security Engineer > Akamai Technologies, Cambridge MA > IM:

RE: Malloc failure when decrypting files larger 1.48 GB with openssl smime

2013-11-25 Thread shathawa
FYI: An RSA cipher algorithm is not a block cipher. It treats the entire message as a very big integer. The better way is to use the RSA cipher algorithm to transmit some symmetric cipher key for AES or another block cipher algorithm and use the block cipher to encrypt and decrypt very big files

Re: DH_compute_key query

2013-11-08 Thread shathawa
Sindya, Looking at the hexdump issue earlier in the thread, I have a question for you. Is your memory buffer block or word aligned? Some mismatch here may cause some block computation issues. - Steve > Steve, > > I am also facing a similar issue. In my case the key generated by > DH_compute_ke

Re: Differences on output between OpenSSL and CryptoTool

2013-10-31 Thread shathawa
> Hello, > > I'm trying to compare the results of the openssl tool with the cryptool > 1.4.31 > > + Filename topsecret.txt which only contains the character 'a' > + Encrypt it with DES using CBC mode with key and iv = 0 produces the > result '32ea a0fa 4f77 fb92' > > user@debian:~$ xxd topsecret.tx

Re: Does OpenSSL timeout connections waiting for a ClientHello?

2013-09-16 Thread shathawa
FYI I have seldom done low-level OpenSSL programming, but have implemented many server based programs. The server application that does an 'accept' on a socket is responsible for the communications on the socket, including any timeouts or recognition of stale communication. Therefore the socket c

Re: How to securely encrypt identical files to identical ciphertext?

2013-08-16 Thread shathawa
Besides using the same cipher (session) key, you also need to use the same initialization vector. Note: in practice, the initialization is a random number that should not be reused. - Steve > Hi all > > I have a requirement to encrypt files, in such a way identical files > should generate identica

Re: encrypt XML and image

2013-03-24 Thread shathawa
Shanil, I am new to the inner workings of the OpenSSL library. I am copying this message to the OpenSSL-Users group. Yes it is possible to encrypt binary images and any content of 8-bit byte streams with the library. With custom padding, it is also possible to encrypt and decrypt arbitrary strin

Re: access all the question n queries on openSSL

2013-03-23 Thread shathawa
> How can i view all the Question the other openssl user has posted ??? > > PLZ tell me the link where all the questions posted by different users are > > > > -- > > From:- > Shanil J.S > Shanil, Marc is a useful mail archiver that captures OpenSSL mail lists. http://marc.info/?l=openssl_users h

Re: Encrypt / DECRYPT a XML file using AES - break the file into 256 bits...

2013-03-23 Thread shathawa
Sanil, 1. Are you trying to encrypt an XML element content? 2. Or are you trying to encrypt the entire XML document? To retain XML capability, you may also need to encode your encrypted blob with Base64 encoding. Steven J. Hathaway Xerces XML > hi, > > can anyone please tell me how to load a fi

Re: specifying the number of rounds that I would like to use with AES-192-CBC

2013-03-16 Thread shathawa
Congrats! you caught my typing error. Steven J. Hathaway > Thanks. > > Is the name spelt Rijndael or Rijndahl? > > On Sat, Mar 16, 2013 at 8:15 PM, wrote: >> AES/Rijndahl >> >> AES has fixed number of rounds and other parameters. >> Rijndahl allows you to specify the algorithm parameters includi

Re: specifying the number of rounds that I would like to use with AES-192-CBC

2013-03-16 Thread shathawa
AES/Rijndahl AES has fixed number of rounds and other parameters. Rijndahl allows you to specify the algorithm parameters including number of rounds. Steven J. Hathaway > So is the number of rounds set by Rijndahl or the AES spec? I'm confused. > > And is the number of rounds hard-coded into the

Re: specifying the number of rounds that I would like to use with AES-192-CBC

2013-03-15 Thread shathawa
I don't know the interfaces to OpenSSL, but AES-192 specifies the number of rounds. The approved AES algorithms specify a subset of Rijndahl cipher whereby you can specify alternative numbers of rounds, key sizes, and block sizes. Sincerely, Steven J. Hathaway > There's a file that I want to enc