Questions tagged [openssl]

OpenSSL is an open source implementation of the SSL and TLS protocols. Questions about how to use the OpenSSL tools and libraries are usually better asked at Stack Overflow or Super User.

Filter by
Sorted by
Tagged with
1
vote
0answers
30 views

CVC-PKCS#10 Generation and Signing

Good day, I have gotten a task at work which has turned out to be a rather interesting nightmare because of the lack of Information on the topic. My task is as follows: In order to ensure an ...
0
votes
0answers
18 views

Generate version 3 x509 certificate from version 1 CA

Please do forgive me for my naivety. I have inherited a legacy system wherein the CA which signs the certificate is of version 1. Is it possible to generate a x509 version 3 certificate which is ...
-1
votes
0answers
26 views

export a .pem certificate file from a OpenSSL.crypto.X509 object in python [migrated]

i'm trying to implement a certificate path validation algorithm. i need to check if the serial number of the certificate exists in a CRL. when I use the get_serial_number() in OpenSSL for a ...
0
votes
1answer
43 views

What if the CSR is intercepted in transit while sending it to CA?

I was studying PKI the other day and I had a serious thinking about the following question. What is CSR? - It is a block of encoded text that is given to the CA when applying for an SSL certificate ...
0
votes
0answers
5 views

Decrypt PBKDF2 with OpenSSL [migrated]

I need to decrypt a document with openssl: Method : PBKDF2WithHmacSHA256 , Salt : saltexample , Passphrase : mypassphrase , I tried the command : ...
16
votes
1answer
6k views

Is openssl rand command cryptographically secure?

I'm wondering if the openssl rand command produces cryptographically secure random bytes. For example when in need for a random password or token: ...
0
votes
1answer
45 views

OpenSSL - What Data Is Used To Create A Certificate's Digital Signature?

I am coming up-to-speed on OpenSSL certificates. In all of my research I see where "data" is hashed to create a hash value that is used as the basis for a certificate's digital signature. This hash ...
0
votes
1answer
73 views

Would knowing the random seed help to break AES or similar?

Consider I knew the seed of the random number generator that Bob uses to send encrypted emails to Alice. Would I have an advantage in deciphering the message? Also, how does, for example, openssl ...
3
votes
1answer
69 views

OpenSSL - extract hash algorithm from signature data (PKCS#1 v 1.5)

PKCS#1 v 1.5 stores hash algorithm identifier that was used to digest the original message. I would like to know if and how to extract this information. I am working on a buffer containing the ...
2
votes
1answer
178 views

openssl encryption salt length

when i was reading the latest source code of openssl, i found openssl enc has an 8-byte (64-bit) salt length; because the same ...
0
votes
0answers
66 views

Diffie-Hellman + Asymetric encryption kept simple, or alternatives to TLS

I am working on a system that includes our dear friends Alice, Bob, and a server that is only partially trusted. I have spent the majority of the day reading up on various cryptography methods, but I ...
0
votes
0answers
18 views

stitched aes_128_cbc_hmac_sha1 encrypt-then-mac

Is there implementation of stitched aes_128_cbc_hmac_sha1 encrypt-then-mac? I can only find mac-then-encrypt implementation in OpenSSL 1 How hard is it to change to encrypt-then-mac and compile it?
1
vote
1answer
45 views

What is the difference between DROWN and ROBOT vulnerability?

It seems like the main idea is the same for both the vulnerabilities then what is the difference?
2
votes
1answer
654 views

PKCS12 password of container and private key

As I understand pkcs12 defines a container structure that can hold both a certificate and one or more private keys. ...
1
vote
1answer
80 views

On what basis is padding chosen in OpenSSL?

I am using CAPI Engine in OpenSSL and I did some test. When I use TLS 1.0 or 1.1, during handshake and RSA signing, PKCS padding is chosen. When I use TLS 1.2, RSA signing uses PSS padding. What ...
0
votes
1answer
72 views

What is the difference between cfb and cfb1 and cfb8 ? ( like openssl's aria-128-cfb & aria-128-cfb1 & aria-128-cfb8 )

What is the difference between cfb and cfb1 and cfb8 ? like openssl's aria-128-cfb and aria-128-cfb1 and ...
10
votes
3answers
7k views

Anatomy of an RSA private key

I'm learning about OpenSSL and public key infrastructure and am curious about the structure of an RSA key and how it's related to its corresponding public key. I can generate a private RSA key with ...
8
votes
2answers
8k views

What are KDF parameters in OpenSSL command-line utility for `enc`?

I refer to https://www.openssl.org/docs/manmaster/apps/enc.html and see that the only parameter for key derivation which I can set explicitly (not considering the obvious ...
0
votes
1answer
121 views

Is there a difference between password and key?

I encrypt data with this command: openssl aes-256-cbc -a -salt -in C:\Users\User\secrets.txt -out C:\Users\User\secrets.txt.encs The program then asks that I... ...
0
votes
0answers
48 views

Help with PKCS#12 Cert/Key Bundle

I'm trying to construct a PKCS#12 cert + key bundle using browser-side Javascript so that key generation and storage can all happen locally. Since it's all local and goes from the browser directly ...
3
votes
1answer
328 views

OpenSSL not producing messages of expected size

I have a 16 byte file, and after encrypting it, its size weirdly changes. ...
2
votes
1answer
10k views

AES CBC Security

I am building an Apache webserver with TLS 1.2 and OpenSSL 1.0.1. So far, I have enabled 2 encryption algorithms - ECDHE AES-256 GCM and ECHDE AES-128 GCM. Firefox and Chrome / Chromium use NSS which ...
1
vote
0answers
66 views

AES-GCM - what are “Payload Length” and “AAD Length”

For the AES-GCM mode within many cryptomodules, their FIPS-validation certificates list the options: Payload Length: 504, 512, 1016, 1024 AAD Length: 0, 504, 512, 1016, 1024 For example in OpenSSL, "...
4
votes
2answers
4k views

Openssl & RSA : how many public exponents are possible?

I would like to know if it is possible to set the public exponent we want with "OpenSSL RSA" or if it is really limited to 2 possible exponents: 3 65537 If yes, why ?
0
votes
1answer
45 views

How is a digital certificate generated?

I understand that the role of a Certificate Authority is to SIGN (not encrypt) a certificate. The signed certificate will theoretically contain: Plain text of data, including the server's public key ...
1
vote
1answer
169 views

Double 3DES/TDES Encryption

If 3DES/TDES (officially TDEA or Triple DEA - Triple Data Encryption Algorithm) encryption is used twice, using 6 different keys K1-...
38
votes
1answer
62k views

AES256-GCM - can someone explain how to use it securely (ruby)

I am looking into using AES256-GCM for encrypting some database fields. I know that for AES256-CBC, I need to generate a new IV for each encrypt, but I can use the same key. The IV can be openly ...
2
votes
1answer
48 views

Do I have to know RSA padding scheme in advance when verifying signature with EVP_Verify*?

Is there a way to figure out what RSA padding type was used on signature during verification (when calling EVP_VerifyInit, EVP_VerifyUpdate and EVP_VerifyFinal) or is it a matter of convention which ...
1
vote
1answer
102 views

Why aren't Diffie Hellman public keys used for authentication?

So I have been reading about Diffie Hellman and specifically the MitM attacks that it is vulnerable to. I am aware that these are solved currently in ssl for instance by using rsa signatures to ...
0
votes
1answer
92 views

Asymmetric or Symmetric encryption

I'm currently looking into OpenSSL and its API and I'm not really familiar with cryptography. So I was looking at the example on asymmetric encryption of an envelope. And it says the message is ...
1
vote
0answers
27 views

TLS client authentication from static client image

I'm trying to implement mutual authentication for a TLS connection between a server (ONOS OpenFlow controller) and multiple clients (OpenFlow switches). I'm restricted in that I must create a single ...
3
votes
1answer
156 views

Requirements for RSA key parameters

Recently I'm working with a chinese vendor for POS devices and their devices use 2048bit RSA keys for signing binaries. I had to generate a public/private pair (so I can sign my own binaries) and I ...
0
votes
0answers
39 views

Error propagation in CBC [duplicate]

I am doing an error propagation experiment with the CBC mode.I have encrypted a 100 byte text file with openssl. I made the 55th bytes of my encrypted file corrupted.As per theory the corresponding ...
1
vote
0answers
19 views

Default RNG used by openssl for certificate generation [duplicate]

I have generated a certificate using openssl with the below command. ...
1
vote
1answer
150 views

Can the OpenSSL random number generator be considered cryptographically secure? [duplicate]

The OpenSSL Random Number generator documented here uses an OS-provided entropy source coupled with a MD5 hash function. Does it impact the quality of randomness to use a broken cryptographic hash ...
2
votes
1answer
578 views

What is the difference between: ecdsap, ecdsak, and ecdsab in the output of “openssl speed”? What do the letters P/K/B refer to?

openssl speed tests the speed of different protocols on your computer: ...
-1
votes
1answer
65 views

I am new to digital certificate 509V3 concept. can some one please clarify the below points [closed]

I am using RSA 2048 with SHA 256 primitive in certificate: How to verify the user certificate n + 1 with Root certificate n? why it is required to perform Certificate chain verification? How to ...
0
votes
1answer
334 views

Does RSASSAPSS use RSA signature

I just need to know is it correct to classify the RSASSAPSS scheme and sha[256 | 512 | 1]WithRSAEncryption all under RSA ...
1
vote
2answers
198 views

AES 256 CBC - Storing local data, how to save IV vector?

I want to use AES256 CBC for protecting small data (<100kb) against misusage for my application in the local store folder. I'm not an expert at data encrypting so I'm to try to understand it step ...
5
votes
1answer
430 views

Which elements of private RSA file are really constitutive of private key?

I have used openssl rsa to generate a RSA key of 2048 bits and as expected output belongs to a file beginning with ...
0
votes
1answer
424 views

No way to do ECDH with OpenSSL from the command line?

I've scoured this website and the OpenSSL wiki pages, and done numerous internet searches, and I've come to the seemingly incredible conclusion that one cannot generate an ECDH shared secret key using ...
0
votes
1answer
109 views

Create self signed certificate from modulus, private and public exponents of RSA

I have the values of RSA public exponent $e$, the secret exponent $d$ and the modulus $n$. How can I create (for example using openssl) a self-signed certificate using the RSA key $(n,d), (n,e)$? Is ...
0
votes
2answers
205 views

CSR creation in android

I'm trying to generate a csr with spongyCastle in android that has to be submited to a webservice. My problem is that the webservice always complains that the CSR is not in DER or PEM format. On the ...
3
votes
2answers
24k views

Decrypt digital signature using RSA public key with openssl

I have a digital signature that was created using the following algorithm: a SHA-256 hash of the body of the message is calculated. It is then signed using an RSA private key and the result is base64-...
1
vote
1answer
194 views

How are AEAD, GCM, CBC, Poly1305, EtM, MtE and E&M related?

I am using OpenSSL 1.1.1 to implement a TLS 1.3 communication module so I tried to learn how data integrity and authentication is ensured. I read a lot about AEAD, GCM, CBC, Poly1305, EtM, MtE and E&...
6
votes
2answers
3k views

Complete Set of Test-Vectors for ECDSA secp256k1

Although there are several implementations of ECDSA secp256k1 public available over the internet (the most popular being OpenSSL), it seems that there are no complete set of test-vectors available. ...
5
votes
3answers
3k views

What is different below two Ciphersuites?

I have two questions; I need an explanation for the differences of below two cipher suites. How do they work with SSL/TLS protocol? (my main concern first one doesn't have '...
2
votes
0answers
143 views

Estonian e-voting, vote verification system

I believe I do understand the basics of how the Estonian e-voting system works, but I'm stuck at their vote verification system. In order to get the vote verified, a client needs to encrypt all of the ...
0
votes
0answers
20 views

Are there any specific weakness in this crypto implementation?

I am reverse engineering the firmware of a particular router/modem. I am focusing on the functionality to export the router configuration. I an searching for a way to decrypt the configuration backup ...
-1
votes
2answers
63 views

A simple misunderstanding of SSL/TLS

I just came to learn about Deffie Hellman Key Exchange. And a little bit about RSA. I came to DH from something about SSL. From what I understood before is that SSL uses DH and TLS uses RSA, but after ...

1
2 3 4 5 6