Re: private keys without authenticated encryption

Peter Gutmann <[email protected]> Mon, 17 Dec 2012 01:20:58 +1300
Newsgroups gmane.comp.encryption.cryptlib
Message-ID <[email protected]>
Andreas Schiermeier <[email protected]> writes:

>is it possible to generate private key files without the RFC 5083
>authenticated encryption?

Not easily, you could edit keyset/pkcs15_adpr.c line 1051 to toggle the use of
the older version of pkcs15AddPrivateKey(), but it'd be much easier to just
update the other software that uses cryptlib to a current version.  However:

>When I load this key file into a statically linked (against cryptlib < 3.4),
>closed source software <http://www.wftpserver.com/> for it's SSH server
>functionality, the file is rejected.

whoever Wing FTP Software is, if they're using cryptlib (there's no mention of
it on their site) then they're using it commercially without complying with
the terms of the Sleepycat license/GPL and making the source code available,
so it's really their problem to fix (along with complying with the license
terms).  Are you sure their software is using cryptlib?

Peter.

_______________________________________________
Cryptlib mailing list
[email protected] via Mail: [email protected]
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.