Re: [openssl-users] Is the structure of this CMS object correct?

2016-02-29 Thread Stephan Mühlstrasser
Am 25.02.16 um 13:16 schrieb Dr. Stephen Henson: So yes it's pretty broken. Just as a quick followup. If you change the two tags I mentioned above the result does then parse. However I've no idea if it will actually decrypt: the key derivation might be broken too. Thanks for the follow-up.

Re: [openssl-users] Is the structure of this CMS object correct?

2016-02-25 Thread Dr. Stephen Henson
On Tue, Feb 23, 2016, Dr. Stephen Henson wrote: > On Tue, Feb 23, 2016, Stephan M?hlstrasser wrote: > > > I tried again to map the structure of the CMS object to the > > definitions in RFC 5652 (comments added with a '%'): > > > > 1: SEQUENCE { > > 2: OBJECT IDENTIFIER envelopedData (1 2 840 1

Re: [openssl-users] Is the structure of this CMS object correct?

2016-02-23 Thread Stephan Mühlstrasser
Am 23.02.16 um 18:26 schrieb Dr. Stephen Henson: On Tue, Feb 23, 2016, Stephan M?hlstrasser wrote: ... So yes it's pretty broken. Steve. Thank you for taking the time to analyse this, Steve. -- Stephan -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/op

Re: [openssl-users] Is the structure of this CMS object correct?

2016-02-23 Thread Dr. Stephen Henson
On Tue, Feb 23, 2016, Stephan M?hlstrasser wrote: > I tried again to map the structure of the CMS object to the > definitions in RFC 5652 (comments added with a '%'): > > 1: SEQUENCE { > 2: OBJECT IDENTIFIER envelopedData (1 2 840 113549 1 7 3) >

Re: [openssl-users] Is the structure of this CMS object correct?

2016-02-23 Thread Stephan Mühlstrasser
Am 23.02.16 um 14:04 schrieb Dr. Stephen Henson: On Tue, Feb 23, 2016, Stephan M?hlstrasser wrote: Am 09.02.16 um 16:39 schrieb Erwann Abalea: Bonjour Stephan, ... PKCS#7 and CMS are pretty much interchangeable. Here, your file is strictly not a PKCS#7v1.5, because in this version, Recipient

Re: [openssl-users] Is the structure of this CMS object correct?

2016-02-23 Thread Dr. Stephen Henson
On Tue, Feb 23, 2016, Stephan M?hlstrasser wrote: > Am 09.02.16 um 16:39 schrieb Erwann Abalea: > >Bonjour Stephan, > > > >... > > > >PKCS#7 and CMS are pretty much interchangeable. > >Here, your file is strictly not a PKCS#7v1.5, because in this version, > >RecipientInfo wasn?t a CHOICE (see RFC2

Re: [openssl-users] Is the structure of this CMS object correct?

2016-02-23 Thread Stephan Mühlstrasser
Am 09.02.16 um 16:39 schrieb Erwann Abalea: Bonjour Stephan, ... PKCS#7 and CMS are pretty much interchangeable. Here, your file is strictly not a PKCS#7v1.5, because in this version, RecipientInfo wasn’t a CHOICE (see RFC2315 to see PKCS#7v1.5 definitions). How did you generate this structure

Re: [openssl-users] Is the structure of this CMS object correct?

2016-02-09 Thread Stephan Mühlstrasser
Am 09.02.2016 um 16:39 schrieb Erwann Abalea: Bonjour Stephan, ... I can also not decrypt the recipient.bin file with the "openssl smime" command. Do I understand it correctly then that the input file is neither a correct PKCS#7 file nor a correct CMS file? PKCS#7 and CMS are pretty much int

Re: [openssl-users] Is the structure of this CMS object correct?

2016-02-09 Thread Erwann Abalea
Bonjour Stephan, Le 9 févr. 2016 à 12:29, Stephan Mühlstrasser mailto:s...@pdflib.com>> a écrit : Am 09.02.16 um 11:53 schrieb Erwann Abalea: Bonjour, Le 9 févr. 2016 à 10:15, Stephan Mühlstrasser mailto:s...@pdflib.com> > a écrit : ... SET { [1] {

Re: [openssl-users] Is the structure of this CMS object correct?

2016-02-09 Thread Stephan Mühlstrasser
Bonjour Erwann, Am 09.02.16 um 11:53 schrieb Erwann Abalea: Bonjour, Le 9 févr. 2016 à 10:15, Stephan Mühlstrasser mailto:s...@pdflib.com>> a écrit : ... SET { [1] { SEQUENCE { INTEGER 3 … This is the expression of an EXPLICIT tag. I can mat

Re: [openssl-users] Is the structure of this CMS object correct?

2016-02-09 Thread Erwann Abalea
Bonjour, Le 9 févr. 2016 à 10:15, Stephan Mühlstrasser mailto:s...@pdflib.com>> a écrit : Hi, I'm trying to decrypt a DER-encoded CMS object (created by Adobe Acrobat) with OpenSSL 1.0.2d: $ openssl cms -decrypt -in recipient.bin -inform DER -inkey atssecp521r1.key -recip atssecp521r1.pem E

[openssl-users] Is the structure of this CMS object correct?

2016-02-09 Thread Stephan Mühlstrasser
Hi, I'm trying to decrypt a DER-encoded CMS object (created by Adobe Acrobat) with OpenSSL 1.0.2d: $ openssl cms -decrypt -in recipient.bin -inform DER -inkey atssecp521r1.key -recip atssecp521r1.pem Error reading S/MIME message 140735227593552:error:0D0680A8:asn1 encoding routines:ASN1_CH