Stack Overflow
Stack Overflow

Questions tagged [gost3410]

GOST 34.10 is a family of the Russian Federal standards for digital signature algorithm which use elliptic curve cryptography.

26 questions
10
votes
1 answer

OpenSSL with GOST engine

I want to use OpenSSL to generate private/public/(Certificate Signing Request) and to sign some data later. But I want to use OpenSSL GOST engine. I downloaded OpenSSL 1.0.0 and modified openssl.cfg file: openssl_conf = openssl_def …
vany
  • 421
  • 1
  • 3
  • 13
4
votes
1 answer

How to compile python with modified OpenSSL (with russian GOST support)?

I am trying to force python 2.7 works with modified openssl library. I need to support russian GOST ciphers. So I configurated OpenSSL like this ./config shared zlib enable-rfc3779 --prefix=/my/path/ and installed it (make depend, make, make test,…
Denis Nikanorov
  • 832
  • 7
  • 16
4
votes
0 answers

OpenSSL gost engine code example

Can anybody help me with example of usage of OpenSSL gost engine. I have to sign data using GOST R 34.10-2001 signature algorithm but can't find any working examples or documention. BTW if I'm not going to use that OpenSSL command line utility is…
SkySurfer
  • 517
  • 3
  • 15
4
votes
1 answer

Generate GOST 34.10-2001 keypair and save it to some keystore

Currently I need to generate a keypair for GOST 34.10-2001 signature algorithm. It was pleasant to discover that bouncy castle provider has supported this algorithm, but I can not generate a keypair and save it to any keystore of any type. Currently…
gkuzmin
  • 2,414
  • 17
  • 24
3
votes
1 answer

OpenSSL gost engine issue

I'm trying to implement ECDH key exchange GOST 34.10-2001 using OpenSSL 1.0.0d. I'm loading gost engine like this: ENGINE * e = ENGINE_by_id("gost"); if(!e) { e = ENGINE_by_id("dynamic"); if (!e) { …
Shirov Grigory
  • 31
  • 3
3
votes
1 answer

Should elliptic curve for public key generation and signature computation be the same?

According to wiki public key in ECDSA is multiplication of private key (random number) to some base point G on elliptic curve C. And also we have usage of C in both signing and verification. May I use some G1 and C1 for public key generation and…
user2104560
3
votes
1 answer

OpenSSL GOST Parameter set

If there a way to insert custom parameters into the GOST 2001 parameters set programmatically and what API should be used? After being managed to generate EVP_PKEY by simulating OpenSSLs' function I found out that parameters are bound to NID, so…
Artem Gulyamshaev
  • 153
  • 6
2
votes
1 answer

Can't read GOST2012 key with BouncyCastle

We have private key (GOST3410-2012). But we can't read it using BouncyCastle 1.8.6.1 Here is a key data: -----BEGIN PRIVATE…
AlexAnt
  • 56
  • 4
2
votes
2 answers

I'm trying to create GOSTR3410 public key. CKR_ATTRIBUTE_TYPE_INVALID exeption

Good day! I'm trying to create public key ObjectHandle based on hex string that comes from client via post request. I'm doing it according to the documentation, but it returns me CKR_ATTRIBUTE_TYPE_INVALID exeption. Full exeption message:…
Ziiaev Emil
  • 35
  • 4
2
votes
1 answer

GOST digital signature verification with OpenSSL in Ruby

I have my certificate, source document, detached signature in Base64 format. Signature created by UEC (Universal Electronic Card - Russian smart card project) on Windows in CryptoARM program (I think GOST hash function is used). I'm using Ubuntu…
Envek
  • 4,426
  • 3
  • 34
  • 42
2
votes
1 answer

how can i make fast ((A^z1 * y^z2) mod P) mod Q

BigIntegerValue.pow(IntegerValue) exponent on java is Integer, but i had Biginteger Value. i had try verify signature GOST 3410, i got this code pow, but its to long.. any have idea? to get P and Q, i'm used bouncy Castle.. but i don't have idea…
Jhohannes Purba
  • 576
  • 1
  • 5
  • 16
2
votes
1 answer

How to add an alias to java.security.Provider?

I need to verify digital signature in a pdf file. I use itextpdf and cryptopro cryptopro provides these aliases for the needed algorithm: , JCP: Signature.GOST3411withGOST3410EL -> ru.CryptoPro.JCP.Sign.GostElSign aliases: [1.2.643.2.2.3,…
basin
  • 3,949
  • 2
  • 27
  • 63
2
votes
1 answer

OpenSSL and GOST engine issue (statically linked)

I have a problem with statically linked openSSL library and GOST crypto engine. I have simple client/server application using GOST keys and certificates. It works fine with GOST keys but only if I use dynamically linked version of openSSL…
Vlad
  • 2,090
  • 3
  • 21
  • 37
1
vote
0 answers

Can Postman be used with GOST SSL?

First, I am not a developer, so I apologize if I don't get this right. I need to send json to a Russian application that uses GOST SSL (GET and POST). I am using the Postman v7.36.1 Windows client. Is it possible to do this? If not, is there a…
Peter Monahan
  • 11
  • 1
1
vote
2 answers

How to get a list of algorithms supported by the certificate

Here's the code to create a digital signature: ContentInfo contentInfo = new ContentInfo(msg); SignedCms signedCms = new SignedCms(contentInfo); CmsSigner cmsSigner = new CmsSigner(signerCert); signedCms.ComputeSignature(cmsSigner,…
HowToRsa
  • 11
  • 3
1
2