Re: Issue With continous PRNG test with Fips module of openssl

2011-09-26 Thread alok sharma
Hi, Thanks for the help, it resolved my problem. Regards, Alok On Fri, Sep 23, 2011 at 5:59 PM, Dr. Stephen Henson wrote: > On Fri, Sep 23, 2011, alok sharma wrote: > > > Hi, > > Ok I got your point. I think it will be helpful.Do you have any link > or > > precedure to setup these call b

Re: Issue With continous PRNG test with Fips module of openssl

2011-09-23 Thread Dr. Stephen Henson
On Fri, Sep 23, 2011, alok sharma wrote: > Hi, > Ok I got your point. I think it will be helpful.Do you have any link or > precedure to setup these call backs or these are just function pointers > which needs to be initialized at ssl initialization time. See the FAQ: http://www.openssl.org/

Re: Issue With continous PRNG test with Fips module of openssl

2011-09-23 Thread alok sharma
Hi, Ok I got your point. I think it will be helpful.Do you have any link or precedure to setup these call backs or these are just function pointers which needs to be initialized at ssl initialization time. Regards, Alok On Fri, Sep 23, 2011 at 5:22 PM, Dr. Stephen Henson wrote: > On Fri, Sep

Re: Issue With continous PRNG test with Fips module of openssl

2011-09-23 Thread Dr. Stephen Henson
On Fri, Sep 23, 2011, alok sharma wrote: > Hi, > The error message comes when we invoke SSL_accept() API. But taking > lock on it will affect performance as it performs network operation inside > this API (like client hello message and other). So if network is overloaded > then mutex hold tim

Re: Issue With continous PRNG test with Fips module of openssl

2011-09-23 Thread alok sharma
Hi, The error message comes when we invoke SSL_accept() API. But taking lock on it will affect performance as it performs network operation inside this API (like client hello message and other). So if network is overloaded then mutex hold time will be too large. I have observed that in worst c

Re: Issue With continous PRNG test with Fips module of openssl

2011-09-23 Thread Dr. Stephen Henson
On Fri, Sep 23, 2011, alok sharma wrote: > I am using the openssl fips version for my application.So, I have not made > any change in openssl or Fips code. Just enabling fips and using SSL API > exposed for client server model. But through debugger I have found that my > application is crashing gi

Re: Issue With continous PRNG test with Fips module of openssl

2011-09-23 Thread alok sharma
I am using the openssl fips version for my application.So, I have not made any change in openssl or Fips code. Just enabling fips and using SSL API exposed for client server model. But through debugger I have found that my application is crashing giving error message inside Fips_rand() at following

Re: Issue With continous PRNG test with Fips module of openssl

2011-09-23 Thread Dr. Stephen Henson
On Fri, Sep 23, 2011, alok sharma wrote: > Hi, > So is there any method on Windows to generate non-predictable > randomnumbers. I think mostly FileSytem time is used to seed randomness > which is failing in my case. > As I indicated this shouldn't be happening if you've set up locking callba

Re: Issue With continous PRNG test with Fips module of openssl

2011-09-23 Thread Jeffrey Walton
On Fri, Sep 23, 2011 at 4:59 AM, alok sharma wrote: >     So is there any method on Windows to generate non-predictable > randomnumbers. I think mostly FileSytem time is used to seed randomness > which is failing in my case. One typically uses CryptGenRandom. Jeff > On Mon, Sep 19, 2011 at 4:52

Re: Issue With continous PRNG test with Fips module of openssl

2011-09-23 Thread alok sharma
Hi, So is there any method on Windows to generate non-predictable randomnumbers. I think mostly FileSytem time is used to seed randomness which is failing in my case. Regards, Alok On Mon, Sep 19, 2011 at 4:52 PM, Dr. Stephen Henson wrote: > On Mon, Sep 19, 2011, alok sharma wrote: > > > Hi J

Re: Issue With continous PRNG test with Fips module of openssl

2011-09-19 Thread Dr. Stephen Henson
On Mon, Sep 19, 2011, alok sharma wrote: > Hi Jacob, > Thanks for such a detailed reply. But I am having one concern that how > an application can know whether it si secure or not. Fips uses > GetSystemTimeAsFileTime() for PRNG test which is having granuality of 1 ns, > but my application is r

Re: Issue With continous PRNG test with Fips module of openssl

2011-09-19 Thread Jakob Bohm
On 9/19/2011 8:49 AM, alok sharma wrote: Hi Jacob, Thanks for such a detailed reply. But I am having one concern that how an application can know whether it si secure or not. Fips uses GetSystemTimeAsFileTime() for PRNG test which is having granuality of 1 ns, but my application is running

Re: Issue With continous PRNG test with Fips module of openssl

2011-09-18 Thread alok sharma
Hi Jacob, Thanks for such a detailed reply. But I am having one concern that how an application can know whether it si secure or not. Fips uses GetSystemTimeAsFileTime() for PRNG test which is having granuality of 1 ns, but my application is running even at faster rate so same value is being ge

Re: Issue With continous PRNG test with Fips module of openssl

2011-09-15 Thread Jakob Bohm
On 9/14/2011 6:33 PM, alok sharma wrote: Hi, I am having my client server on Windows. The server is concurrent and having each thread for each connection. When the number of connection increases to 400-500 i.e having high thread load, my server crashes. I debuged it and found that it gives

Issue With continous PRNG test with Fips module of openssl

2011-09-14 Thread alok sharma
Hi, I am having my client server on Windows. The server is concurrent and having each thread for each connection. When the number of connection increases to 400-500 i.e having high thread load, my server crashes. I debuged it and found that it gives error (“random number generator:FIPS_RAND:p