RE: Data and Signature (envelope)

2013-04-26 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of redpath > Sent: Thursday, 25 April, 2013 09:40 > To: openssl-users@openssl.org > Subject: Re: Data and Signature (envelope) > > I looked at the latest smsign.c shown below modified with a > large data item. > The result

Re: Data and Signature (envelope)

2013-04-25 Thread redpath
I looked at the latest smsign.c shown below modified with a large data item. The result is still a detached and quite small like a signature. The flag changed and yet nothing different. It should be quite large. All I see is the API to soign p7 = PKCS7_sign(scert, skey, NULL, in, flags); and trie

Re: Data and Signature (envelope)

2013-04-25 Thread Dr. Stephen Henson
On Thu, Apr 25, 2013, Viktor Dukhovni wrote: > On Wed, Apr 24, 2013 at 10:35:04PM -0400, Dave Thompson wrote: > > > > I am assuming RSA though I would like to do ECDSA. > > > > These APIs will use any privatekey for which a signature > > scheme is available; that's RSA DSA ECDSA (or pedantically

Re: Data and Signature (envelope)

2013-04-25 Thread Dr. Stephen Henson
On Thu, Apr 25, 2013, redpath wrote: > I took the sign.c example and modified it slightly to use artifacts I have, > but it seems the result just produces a PKCS7 that has a signature? > I want to have the data (PDF or JPG) in there as I need to use it after > validating > that it is trusted. >

Re: Data and Signature (envelope)

2013-04-25 Thread redpath
Exactly a non-detached, I see the constant detached and thought thats what it meant but that road lead nowhere, so if anyone has pointers how to make a non-detacched or modify below that would be great. -- View this message in context: http://openssl.6102.n7.nabble.com/Data-and-Signature-envel

Re: Data and Signature (envelope)

2013-04-25 Thread Jakob Bohm
On 4/25/2013 1:13 PM, redpath wrote: I took the sign.c example and modified it slightly to use artifacts I have, but it seems the result just produces a PKCS7 that has a signature? I want to have the data (PDF or JPG) in there as I need to use it after validating that it is trusted. Basically I

Re: Data and Signature (envelope)

2013-04-25 Thread redpath
I took the sign.c example and modified it slightly to use artifacts I have, but it seems the result just produces a PKCS7 that has a signature? I want to have the data (PDF or JPG) in there as I need to use it after validating that it is trusted. Basically I have a piece of data and a signature an

Re: Data and Signature (envelope)

2013-04-25 Thread redpath
I thought the PKCS7 was the way to go thanks. Yes the command line is confusing as to what the PKCS7 can provide and thats what was a paradox to me. Any pointers to PKCS7 example code inserting objects and extracted them would be appreciated and I do use the men_bio nicely. -- View this messag

Re: Data and Signature (envelope)

2013-04-24 Thread Viktor Dukhovni
On Wed, Apr 24, 2013 at 10:35:04PM -0400, Dave Thompson wrote: > > I am assuming RSA though I would like to do ECDSA. > > These APIs will use any privatekey for which a signature > scheme is available; that's RSA DSA ECDSA (or pedantically > EC; openssl uses the same EC_KEY struct for ECDSA and

RE: Data and Signature (envelope)

2013-04-24 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of redpath > Sent: Wednesday, 24 April, 2013 18:10 > I saw the CMS but I did not see how to store raw data which I need to > extract? > Lets assume the data was a JPG and I created signature from > the MD (SHA1) > how can I get the JPG use it and

Re: Data and Signature (envelope)

2013-04-24 Thread redpath
I saw the CMS but I did not see how to store raw data which I need to extract? Lets assume the data was a JPG and I created signature from the MD (SHA1) how can I get the JPG use it and validate it. I looked at the PKCS7 and no mention of adding objects. Any example is best to learn assuming dat

Re: Data and Signature (envelope)

2013-04-24 Thread Krzysztof Konopko
2013/4/24 redpath > I have a piece of data like a JPG and a MD from it and a signature PKCS#1 > from the MD. > >int rc= RSA_sign(NID_sha1, md, 20, sigret, &siglen, rsapriv) > > I send the data and the signature to someone to verify the data and they > use > it. > Now maybe there is standard m