18 reputation
3
bio website
location
age
visits member for 5 months
seen Nov 3 at 4:29

Oct
31
comment Why does openssl use SHA1 in ECC when I use secp384r1 curve
Thanks, but i can't change cipher suites. And i did the same, first set 48 bytes to 0 and copied 20 bytes of hash in reverse order it is working now.
Oct
29
awarded  Scholar
Oct
29
awarded  Supporter
Oct
29
accepted Why does openssl use SHA1 in ECC when I use secp384r1 curve
Oct
29
comment Why does openssl use SHA1 in ECC when I use secp384r1 curve
Thanks for a quick response. actually I am using nanoECC with curve secp384r1 and while signing it is expecting 48 bytes of hash but am using TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA cipher.
Oct
29
asked Why does openssl use SHA1 in ECC when I use secp384r1 curve
Jul
16
comment generate hash of all handshake messages for verify data (DTLS)
Thanks for your active response.
Jul
14
comment generate hash of all handshake messages for verify data (DTLS)
I solved application MAC issue also, the problem is i am not passing correct length of application data.
Jul
10
comment generate hash of all handshake messages for verify data (DTLS)
Thanks a lot for helping me I found the way, my mistake is if I have 60 bytes of data, I should pad 4 bytes with 03 but I am padding with 04. But now I got problem in Application data, the MAC of client & server is not matching. If you don't mind can you help to solve this. Thanks...
Jul
8
comment generate hash of all handshake messages for verify data (DTLS)
it is still not clear can any one explain me how to create a finished message in dtls (client), i am using PSK_WITH_AES_128_CBC_SHA
Jul
8
comment generate hash of all handshake messages for verify data (DTLS)
it is still not clear can you explain how to create a finished message in dtls, i am using PSK_WITH_AES_128_CBC_SHA thanks
Jul
3
comment generate hash of all handshake messages for verify data (DTLS)
thanks for your reply, actually i am acting like client to openssl and trying to send client_key_exchange + ccs + encrypted_finished messages. In the reply I am not receiving any thing I means openssl is not sending reply. What I am doing is after generating 12 bytes of verify_data V creating pkt like: ) P = type(0x14)+len(3bytes)+msg_seq(2bytes)+frag_offset+frag_len(3bytes)+V; hmac_sha1(client_write_mac, P, digest); finished = Record+AES128(P+digest); Is that correct, if not how to create finished message. thanks.
Jul
1
awarded  Student
Jul
1
asked generate hash of all handshake messages for verify data (DTLS)