Re: CNG engine on GitHub

2021-07-07 Thread Reinier Torenbeek
Hello Selva and Matt, Thanks for the pointers. Following the suggested approach, I have added (in a branch of a fork) initial support of RSA-PSS for the BCrypt engine and the few first tests look promising. Next, I will do the same thing for NCrypt. After that I will probably add support for OAEP

Re: CNG engine on GitHub

2021-07-02 Thread Selva Nair
Hi > >> >> This is great, but limiting RSA signature to RSA-PKCS#1 v 1.5 is a major >> limitation. It doesn't have to be that way as the OpenSSL engine interface >> does allow using EVP_PKEY_METHOD callbacks instead of rsa_priv_dec etc. >> > > Yes I agree the lack of support for RSA-PSS is

Re: CNG engine on GitHub

2021-07-02 Thread Matt Caswell
On 02/07/2021 16:33, Matt Caswell wrote: via the RSA_PKEY_METHOD I meant RSA EVP_PKEY_METHOD. Matt

Re: CNG engine on GitHub

2021-07-02 Thread Matt Caswell
On 02/07/2021 16:18, Reinier Torenbeek wrote: It is not clear to me what you mean with "the OpenSSL engine interface does allow using EVP_PKEY_METHOD callbacks instead of rsa_priv_dec etc.". Can you elaborate (here or on the GitHub issue)? You can hook the RSA calls at different

Re: CNG engine on GitHub

2021-07-02 Thread Reinier Torenbeek
t; may want to check out this new OpenSSL CNG Engine project on GitHub: >> https://github.com/rticommunity/openssl-cng-engine . The associated >> User's Manual is on ReadTheDocs: >> https://openssl-cng-engine.readthedocs.io/en/latest/index.html . >> >> The project imp

Re: CNG engine on GitHub

2021-07-02 Thread Reinier Torenbeek
everaging Windows CNG with OpenSSL 1.1.1, you > may want to check out this > > new OpenSSL CNG Engine project on GitHub: > https://github.com/rticommunity/openssl-cng-engine . The > > associated User's Manual is on ReadTheDocs: > > https://openssl-cng-engine.readthedocs.io/en/late

Re: CNG engine on GitHub

2021-07-02 Thread Selva Nair
Hi, On Thu, Jul 1, 2021 at 1:49 PM Reinier Torenbeek < reinier.torenb...@gmail.com> wrote: > Hi, > > For anyone interested in leveraging Windows CNG with OpenSSL 1.1.1, you > may want to check out this new OpenSSL CNG Engine project on GitHub: > https://github.com/rticommuni

Re: OpenSSL CNG engine on GitHub

2021-07-02 Thread Reinier Torenbeek
port, which lacks just due to the > engine interface. > > Cheers, > > David > > > On 01.07.21 19:49, Reinier Torenbeek wrote: > > Hi, > > For anyone interested in leveraging Windows CNG with OpenSSL 1.1.1, you > may want to check out this new OpenSSL CNG Engine p

Re: CNG engine on GitHub

2021-07-02 Thread Reinier Torenbeek
ted in 3.0. > >> > >> Matt > >> > >> > >>> On 01/07/2021 18:49, Reinier Torenbeek wrote: > >>> Hi, > >>> For anyone interested in leveraging Windows CNG with OpenSSL 1.1.1, > you may want to check out this new OpenSSL CNG Engine

Re: CNG engine on GitHub

2021-07-02 Thread Richard Levitte
u may > want to check out this > new OpenSSL CNG Engine project on GitHub: > https://github.com/rticommunity/openssl-cng-engine . The > associated User's Manual is on ReadTheDocs:  > https://openssl-cng-engine.readthedocs.io/en/latest/index.html . > > The project i

Re: OpenSSL CNG engine on GitHub

2021-07-02 Thread David von Oheimb
new OpenSSL CNG Engine project on > GitHub: https://github.com/rticommunity/openssl-cng-engine . The > associated User's Manual is on > ReadTheDocs: https://openssl-cng-engine.readthedocs.io/en/latest/index.html > . > > The project implements the majority of the EVP interfac

Re: CNG engine on GitHub

2021-07-02 Thread Matt Caswell
1.1.1, you may want to check out this new OpenSSL CNG Engine project on GitHub: https://github.com/rticommunity/openssl-cng-engine <https://github.com/rticommunity/openssl-cng-engine> . The associated User's Manual is on ReadTheDocs: https://openssl-cng-engine.readthedocs.io/en/latest/inde

Re: CNG engine on GitHub

2021-07-01 Thread Reinier Torenbeek
ek wrote: >> Hi, >> For anyone interested in leveraging Windows CNG with OpenSSL 1.1.1, you may >> want to check out this new OpenSSL CNG Engine project on GitHub: >> https://github.com/rticommunity/openssl-cng-engine >> <https://github.com/rticommunity/openssl-c

Re: CNG engine on GitHub

2021-07-01 Thread Matt Caswell
Nice! Are there any thoughts to support providers? The engine interface is deprecated in 3.0. Matt On 01/07/2021 18:49, Reinier Torenbeek wrote: Hi, For anyone interested in leveraging Windows CNG with OpenSSL 1.1.1, you may want to check out this new OpenSSL CNG Engine project on GitHub

CNG engine on GitHub

2021-07-01 Thread Reinier Torenbeek
Hi, For anyone interested in leveraging Windows CNG with OpenSSL 1.1.1, you may want to check out this new OpenSSL CNG Engine project on GitHub: https://github.com/rticommunity/openssl-cng-engine . The associated User's Manual is on ReadTheDocs: https://openssl-cng-engine.readthedocs.io/en/latest