Questions tagged [openssl]

OpenSSL is an open source implementation of the SSL and TLS protocols. Questions about how to use the OpenSSL tools and libraries are usually better asked at Stack Overflow or Super User.

Filter by
Sorted by
Tagged with
1
vote
0answers
46 views

How to look for implementations of universal hashing?

Being a physicist, I know very little about cryptography. In fact, the main two practical aspects I've learned so far are: Unless you're an expert, 1. Don't try to invent new cryptosystems and 2. Don'...
2
votes
1answer
22 views

Best suitable column type for openssl $tag,$iv,$key,$encrypted?

Which column type is best for storing $tag, $iv, $key, $encryptedData generated by openssl_encryption, and in which format I should save these values? I am using &...
0
votes
1answer
47 views

OpenSSL cipher suite support / key requirement for ecdhe_ecdsa_with_aes128_cbc_sha256

I hope this is the right place for that kind of question. So actually I am trying to test the TLS implementation of some industrial device. I have to write my own TLS implementation for this, for ...
2
votes
2answers
459 views

openSSL created CSR signature size of 73 bytes but should't it be 70 bytes

after creating CSR using openSSL with secp256r1 curve inspecting the file using openssl asn1parse -i -in ecTest.csr the size of ...
0
votes
1answer
62 views

OpenSSL supports AES, Camellia, ChaCha. How about Twofish, Threefish, Serpent?

If I understood correctly, some symmetric ciphers such as AES, Camellia, ChaCha are implemented in OpenSSL (along with several older ones) but some other commonly used and proven ciphers such as ...
0
votes
1answer
45 views

Why is an RSA public key BITWRAP-ed in ASN.1 DER encoding?

While playing around with creating an RSA public key, and decoding it using a home brew ASN.1 decoder, I ran into the fact that the public key is BITWRAP-ed. BITWRAP seems to be an OpenSSL modifier, ...
1
vote
1answer
98 views

OpenSSL aes-128-cfb does not produce expected size

I try to implement aes-128-cfb myself for learning. To confirm whether my implementation is correct, I want to verify it with a well-known library such as OpenSSL. But then I noticed something strange ...
3
votes
1answer
142 views

Do the session keys have the same value on both sides during TLS?

I have two questions about the sessions keys generated during the last steps of the Handshake phase: Do the "client write key" and the "server write key" have the same value, even ...
0
votes
0answers
40 views

Elliptic curve group inverse addition in OpenSSL

I am using group P-256 on OpenSSL with C++. My understanding was that, if you have a point $xP$ and then calculate (xP)^(-1) with EC_POINT_invert(group, xP_inv, ctx), then when I calculate: xP + (xP)^(...
5
votes
1answer
58 views

OpenSSL FIPS integrity check

As far as I know, FIPS requires a set of self tests (POST) to verify the cryptographic algorithms permitted and the integrity of the module. These tests are performed at run-time, so OpenSSL does a ...
1
vote
0answers
36 views

CVC-PKCS#10 Generation and Signing

Good day, I have gotten a task at work which has turned out to be a rather interesting nightmare because of the lack of Information on the topic. My task is as follows: In order to ensure an ...
0
votes
0answers
21 views

Generate version 3 x509 certificate from version 1 CA

Please do forgive me for my naivety. I have inherited a legacy system wherein the CA which signs the certificate is of version 1. Is it possible to generate a x509 version 3 certificate which is ...
0
votes
1answer
45 views

What if the CSR is intercepted in transit while sending it to CA?

I was studying PKI the other day and I had a serious thinking about the following question. What is CSR? - It is a block of encoded text that is given to the CA when applying for an SSL certificate ...
0
votes
1answer
54 views

OpenSSL - What Data Is Used To Create A Certificate's Digital Signature?

I am coming up-to-speed on OpenSSL certificates. In all of my research I see where "data" is hashed to create a hash value that is used as the basis for a certificate's digital signature. This hash ...
0
votes
1answer
80 views

Would knowing the random seed help to break AES or similar?

Consider I knew the seed of the random number generator that Bob uses to send encrypted emails to Alice. Would I have an advantage in deciphering the message? Also, how does, for example, openssl ...
3
votes
1answer
97 views

OpenSSL - extract hash algorithm from signature data (PKCS#1 v 1.5)

PKCS#1 v 1.5 stores hash algorithm identifier that was used to digest the original message. I would like to know if and how to extract this information. I am working on a buffer containing the ...
0
votes
0answers
70 views

Diffie-Hellman + Asymetric encryption kept simple, or alternatives to TLS

I am working on a system that includes our dear friends Alice, Bob, and a server that is only partially trusted. I have spent the majority of the day reading up on various cryptography methods, but I ...
0
votes
0answers
21 views

stitched aes_128_cbc_hmac_sha1 encrypt-then-mac

Is there implementation of stitched aes_128_cbc_hmac_sha1 encrypt-then-mac? I can only find mac-then-encrypt implementation in OpenSSL 1 How hard is it to change to encrypt-then-mac and compile it?
1
vote
1answer
51 views

What is the difference between DROWN and ROBOT vulnerability?

It seems like the main idea is the same for both the vulnerabilities then what is the difference?
3
votes
1answer
184 views

On what basis is padding chosen in OpenSSL?

I am using CAPI Engine in OpenSSL and I did some test. When I use TLS 1.0 or 1.1, during handshake and RSA signing, PKCS padding is chosen. When I use TLS 1.2, RSA signing uses PSS padding. What ...
0
votes
1answer
170 views

What is the difference between cfb and cfb1 and cfb8 ? ( like openssl's aria-128-cfb & aria-128-cfb1 & aria-128-cfb8 )

What is the difference between cfb and cfb1 and cfb8 ? like openssl's aria-128-cfb and aria-128-cfb1 and ...
2
votes
1answer
1k views

PKCS12 password of container and private key

As I understand pkcs12 defines a container structure that can hold both a certificate and one or more private keys. ...
0
votes
0answers
61 views

Help with PKCS#12 Cert/Key Bundle

I'm trying to construct a PKCS#12 cert + key bundle using browser-side Javascript so that key generation and storage can all happen locally. Since it's all local and goes from the browser directly ...
0
votes
1answer
193 views

Is there a difference between password and key?

I encrypt data with this command: openssl aes-256-cbc -a -salt -in C:\Users\User\secrets.txt -out C:\Users\User\secrets.txt.encs The program then asks that I... ...
3
votes
1answer
341 views

OpenSSL not producing messages of expected size

I have a 16 byte file, and after encrypting it, its size weirdly changes. ...
1
vote
0answers
97 views

AES-GCM - what are “Payload Length” and “AAD Length”

For the AES-GCM mode within many cryptomodules, their FIPS-validation certificates list the options: Payload Length: 504, 512, 1016, 1024 AAD Length: 0, 504, 512, 1016, 1024 For example in OpenSSL, "...
0
votes
1answer
46 views

How is a digital certificate generated?

I understand that the role of a Certificate Authority is to SIGN (not encrypt) a certificate. The signed certificate will theoretically contain: Plain text of data, including the server's public key ...
1
vote
1answer
176 views

Double 3DES/TDES Encryption

If 3DES/TDES (officially TDEA or Triple DEA - Triple Data Encryption Algorithm) encryption is used twice, using 6 different keys K1-...
2
votes
1answer
61 views

Do I have to know RSA padding scheme in advance when verifying signature with EVP_Verify*?

Is there a way to figure out what RSA padding type was used on signature during verification (when calling EVP_VerifyInit, EVP_VerifyUpdate and EVP_VerifyFinal) or is it a matter of convention which ...
1
vote
1answer
117 views

Why aren't Diffie Hellman public keys used for authentication?

So I have been reading about Diffie Hellman and specifically the MitM attacks that it is vulnerable to. I am aware that these are solved currently in ssl for instance by using rsa signatures to ...
0
votes
1answer
108 views

Asymmetric or Symmetric encryption

I'm currently looking into OpenSSL and its API and I'm not really familiar with cryptography. So I was looking at the example on asymmetric encryption of an envelope. And it says the message is ...
1
vote
0answers
28 views

TLS client authentication from static client image

I'm trying to implement mutual authentication for a TLS connection between a server (ONOS OpenFlow controller) and multiple clients (OpenFlow switches). I'm restricted in that I must create a single ...
0
votes
0answers
40 views

Error propagation in CBC [duplicate]

I am doing an error propagation experiment with the CBC mode.I have encrypted a 100 byte text file with openssl. I made the 55th bytes of my encrypted file corrupted.As per theory the corresponding ...
3
votes
1answer
221 views

Requirements for RSA key parameters

Recently I'm working with a chinese vendor for POS devices and their devices use 2048bit RSA keys for signing binaries. I had to generate a public/private pair (so I can sign my own binaries) and I ...
2
votes
1answer
269 views

openssl encryption salt length

when i was reading the latest source code of openssl, i found openssl enc has an 8-byte (64-bit) salt length; because the same ...
1
vote
0answers
19 views

Default RNG used by openssl for certificate generation [duplicate]

I have generated a certificate using openssl with the below command. ...
1
vote
1answer
186 views

Can the OpenSSL random number generator be considered cryptographically secure? [duplicate]

The OpenSSL Random Number generator documented here uses an OS-provided entropy source coupled with a MD5 hash function. Does it impact the quality of randomness to use a broken cryptographic hash ...
1
vote
2answers
347 views

AES 256 CBC - Storing local data, how to save IV vector?

I want to use AES256 CBC for protecting small data (<100kb) against misusage for my application in the local store folder. I'm not an expert at data encrypting so I'm to try to understand it step ...
5
votes
1answer
511 views

Which elements of private RSA file are really constitutive of private key?

I have used openssl rsa to generate a RSA key of 2048 bits and as expected output belongs to a file beginning with ...
0
votes
1answer
632 views

No way to do ECDH with OpenSSL from the command line?

I've scoured this website and the OpenSSL wiki pages, and done numerous internet searches, and I've come to the seemingly incredible conclusion that one cannot generate an ECDH shared secret key using ...
0
votes
1answer
127 views

Create self signed certificate from modulus, private and public exponents of RSA

I have the values of RSA public exponent $e$, the secret exponent $d$ and the modulus $n$. How can I create (for example using openssl) a self-signed certificate using the RSA key $(n,d), (n,e)$? Is ...
0
votes
2answers
328 views

CSR creation in android

I'm trying to generate a csr with spongyCastle in android that has to be submited to a webservice. My problem is that the webservice always complains that the CSR is not in DER or PEM format. On the ...
1
vote
1answer
240 views

How are AEAD, GCM, CBC, Poly1305, EtM, MtE and E&M related?

I am using OpenSSL 1.1.1 to implement a TLS 1.3 communication module so I tried to learn how data integrity and authentication is ensured. I read a lot about AEAD, GCM, CBC, Poly1305, EtM, MtE and E&...
-1
votes
2answers
70 views

A simple misunderstanding of SSL/TLS

I just came to learn about Deffie Hellman Key Exchange. And a little bit about RSA. I came to DH from something about SSL. From what I understood before is that SSL uses DH and TLS uses RSA, but after ...
0
votes
0answers
22 views

Are there any specific weakness in this crypto implementation?

I am reverse engineering the firmware of a particular router/modem. I am focusing on the functionality to export the router configuration. I an searching for a way to decrypt the configuration backup ...
1
vote
0answers
104 views

SDES algorithm purpose

What is the purpose of SDES algorithm? (Session Description Protocol Security Descriptions) What are the problems in the way it exchanges keys? I have tried to search about these quastions but i ...
1
vote
1answer
216 views

CSR signature using elliptic curve [closed]

We've been asked to generate a certificate signing request using elliptic curve and we can't use any third-party library as it's an embedded application with very limited resources). We are used to ...
0
votes
2answers
475 views

Using RSA encryption with OpenSSL library: secure?

I'm working on a small program (in C) that writes encrypted log files, but there are a lot of articles out there that say you should avoid RSA whenever possible. However, most of these articles also ...
3
votes
0answers
51 views

Does Openssl 1.1.1 library supports sending multiple identities as part of PSK?

Does Openssl 1.1.1 supports sending multiple ticket identities as part of PSK? i have gone through the openssl code and i don't see that openssl supports it. could someone please confirm it if i ...
3
votes
1answer
3k views

curve25519 by openSSL

How can i generate ec curve25519 keys using openSSL? When I run openssl ecparam -name curve25519 -genkey -noout -out private.ec.key I have this message ...

1
2 3 4 5 6