Re: openssl 1.1.1 opaque structures

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




On 23/11/2018 10:33, priya p wrote:
> Hi,       
>   
> In this snippet, 
> 
>        DH *dh;
>               if ((dh->g = BN_new()) == NULL)-------------> 1
>                      goto end;
>              if (!BN_set_word(dh->g, g)) -----------------------> 2
>                       goto end;
> 
> Here as we can't reference dh structure members directly,  how can we initialize
> and set it in case of 1 and 2 ?

Use the DH_set0_pqg() function:

https://www.openssl.org/docs/man1.1.1/man3/DH_set0_pqg.html

You must also set p at the same time.

Matt

> 
> Thanks,
> Priya
> 
> 
> On Tue, 20 Nov 2018 at 23:08, priya p <priyahere223@xxxxxxxxx
> <mailto:priyahere223@xxxxxxxxx>> wrote:
> 
>     Thanks Matt and Michael.
> 
>     On Tue, 20 Nov 2018 at 20:59, Matt Caswell <matt@xxxxxxxxxxx
>     <mailto:matt@xxxxxxxxxxx>> wrote:
> 
> 
> 
>         On 20/11/2018 15:27, Michael Richardson wrote:
>         > priya p <priyahere223@xxxxxxxxx <mailto:priyahere223@xxxxxxxxx>> wrote:
>         >     > In openssl-1.1.1, few structures have been made opaque like
>         HMAC_CTX,
>         >     > EVP_CIPHER_CTX etc.,
>         >
>         >     > There are new API to get and set those structure members. But to
>         >     > zeroize those structure members in place, I dont see any API.
>         >
>         > "in place", do you mean because you've allocated them as auto variables
>         > on the stack?
> 
>         It is not possible to allocate opaque structures on the stack. The
>         compiler will
>         complain.
> 
>         Matt
> 
>         -- 
>         openssl-users mailing list
>         To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
> 
> 
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users




[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]

  Powered by Linux