Questions tagged [openssl-engine]

62 questions
2
votes
0 answers

Implementing ECDH engine in OpenSSL 1.1.1

I am trying to write an OpenSSL Engine with ECDH support. I am following this page on the OpenSSL wiki : https://wiki.openssl.org/index.php/Creating_an_OpenSSL_Engine_to_use_indigenous_ECDH_ECDSA_and_HASH_Algorithms. However it is based on version…
2
votes
0 answers

The below code is working very fine for the detached signature!! How to get attached signature?

The result that I am getting in final is detached signature but my requirement is to get the attached signature.I must sign with my CSR file to get the attached signature using openssl.I have gone through a lot of websites but no one has provided…
Pavan Kumar
  • 37
  • 10
2
votes
0 answers

MAC Keychain tool integration with OpenSSL

We already have visited the link at OpenSSL and Apple Keychain integration, but didn't found anything about engine. Also the question asked in above link is too old. Is there any implementation of such type of engine till now or not?
User1234
  • 1,543
  • 4
  • 22
  • 32
2
votes
1 answer

OpenSSL RSA engine - RSA verify failure

I have below a Minimal, Complete, and Verifiable example of what I want to do. Basically I want to implement an OpenSSL RSA engine that integrates some CUDA code. The CUDA part should do the modular exponentiation but it is not important in this…
Dani Grosu
  • 544
  • 1
  • 4
  • 22
2
votes
1 answer

Why ref count for an openssl engine is so high?

There is a cleanup command in openssl engine API called ENGINE_finish(e), which calls a "finish" command implemented and registered in the engine e. The engine's "finish" command will be called only if a reference count to the engine is equal to 1. …
Oleg Gryb
  • 5,122
  • 1
  • 28
  • 40
1
vote
0 answers

OPENSSL Error: The input data looks too long to be a hash

I am trying to generate and verify the signature with a private key. Its a very straight forward process. However, I am facing this issue. clear Echo "Generate EC KeyPair from OpenSSL command line" Echo "1. Create the EC key:" openssl ecparam…
1
vote
1 answer

Get logs of OpenSC PKCS11 engine for OpenSSL

I'm using OpenSC's PKCS11 engine for OpenSSL. I want to obtain the logs from OpenSC, also I want to force a login. According to https://github.com/OpenSC/libp11/blob/master/README.md I can do so with the VERBOSE and FORCE_LOGIN parameters, but where…
D.R.
  • 20,268
  • 21
  • 102
  • 205
1
vote
0 answers

How to specify the Engine used for SSL functions in OpenSSL Library?

I understand how openssl ```ENGINE and evp works, and how to use engines in libcrypto C language programming(applying digest/encryption/signing etc. for plain data). Now I would like to learn how to apply engine for all cryptographic processes…
yoyozi
  • 86
  • 6
1
vote
1 answer

error: redefinition of ‘struct rsa_meth_st’

I'm trying to develop an RSA engine. My engine was somewhat working until I try to integrate my engine with an apache httpd server. After installing the httpd from the source code, it turns out that, I can't compile my engine code anymore. I get the…
user45698746
  • 305
  • 2
  • 13
1
vote
1 answer

How to encrypt/decrypt using key index in OpenSSL EVP APIs?

My system includes a Hardware Secure module(HSM), which imports symmetric/asymmetric keys to its internal memory, then provides key index to outside users for future use(encrypt/decrypt). I'm now writing an OpenSSL engine for this HSM, which is…
yoyozi
  • 86
  • 6
1
vote
1 answer

How does OpenSSL choose which ENGINE to use?

I have an application that dynamically links with OpenSSL 1.0.2 and TPM hardware with OpenSSL ENGINE implementation for RSA. I use OpenSSL's dynamic ENGINE to register the TPM ENGINE. This is how the (simplified) code…
Nadim Z
  • 91
  • 1
  • 6
1
vote
1 answer

ECDSA with OPENSSL

I want to implement ECDSA in OPENSSL. But I'm getting below warnings ECDSA_sign deprecated & ECDSA_do_verify is deprecated. Can anyone please guide me how to handle this error.
1
vote
0 answers

RSA with custom engine openssl

I am looking to run this (URL)code with custom engine: https://sehermitage.web.fc2.com/program/src/rsa_evp.c I want to implement below functions with engine. EVP_PKEY_CTX_new(pkey, Engine e); EVP_PKEY_CTX *EVP_PKEY_CTX_new_id(int id, ENGINE…
1
vote
0 answers

OpenSSL BIGNUM issue, when migrating from 1.0.2 to 1.1.1

I am facing OpenSSL BIGNUM issue when migrating from 1.0.2 to 1.1.1 version. I included openssl/bn.h, but the compiler says : "incomplete type is not allowed static const BIGNUM pubmod" Here is the code: static const BN_ULONG pubkey[] = {…
Raghu Nath
  • 21
  • 1
1
vote
1 answer

CURLINFO_SSL_ENGINES don't list openssl engine

I try to use engine pkcs11 with curl. Firstly, I add my engine pkcs11 to openssl. int initEngine() { ENGINE_load_builtin_engines(); ENGINE *e; display_engine_list(); e = ENGINE_by_id("dynamic"); if(!e) { return -1; …
helene
  • 1,201
  • 2
  • 18
  • 30