Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results

Home NTDEV

Before Posting...

Please check out the Community Guidelines in the Announcements and Administration Category.

More Info on Driver Writing and Debugging


The free OSR Learning Library has more than 50 articles on a wide variety of topics about writing and debugging device drivers and Minifilters. From introductory level to advanced. All the articles have been recently reviewed and updated, and are written using the clear and definitive style you've come to expect from OSR over the years.


Check out The OSR Learning Library at: https://www.osr.com/osr-learning-library/


more on: Cross-Platform Encryption Libraries?

OSR_Community_UserOSR_Community_User Member Posts: 110,217
At 02:51 PM 04/21/2000 -0700, I wrote:
>Any recommendations on cross-platform encryption libraries? Specifically, NT
>and Unix / Linux / Solaris? Ideally, with source so we can compile locally?
>We have a customer who is requesting that we encrypt the data we exchange
>with them. Our end is NT, their end is Unix, and we'd prefer an
>off-the-shelf commercial solution.

Clarification: We have software on each end of the connection, and we would
like to incorporate encryption into our existing code. I'm thinking here of
a library which accepts a pointer to allocated memory and encrypts/decrypts
it - something along those lines. A programming library with an API, not a
command-line utility from Norton <grin>.

Thanks!

Comments

  • OSR_Community_UserOSR_Community_User Member Posts: 110,217
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    I use PGP on my laptop (NT) and some of our *nix development systems.

    Mcafee sells a personal PGP package for $19.99 for Windows. PGP is
    freely available for most flavors of UNIX. I'm not aware of anyone
    packaging it for Linux or Solaris.

    Clark


    > -----Original Message-----
    > From: [email protected]
    > [mailto:[email protected]]On Behalf Of Richard
    > Hartman Sent: Friday, April 21, 2000 4:51 PM To: NT Developers
    > Interest List Subject: [ntdev] Cross-Platform Encryption Libraries?
    >
    >
    >
    > Any recommendations on cross-platform encryption libraries?
    > Specifically, NT
    > and Unix / Linux / Solaris? Ideally, with source so we can
    > compile locally?
    > We have a customer who is requesting that we encrypt the data we
    > exchange with them. Our end is NT, their end is Unix, and we'd
    > prefer an off-the-shelf commercial solution.
    >
    > Thanks!
    >
    >
    > ---
    > You are currently subscribed to ntdev as: [email protected]
    To unsubscribe send a blank email to $subst('Email.Unsub')

    -----BEGIN PGP SIGNATURE-----
    Version: PGP Personal Privacy 6.5.1

    iQA/AwUBOQDSX+B0WaKgfXz5EQKwNQCdFfL7yV/tjwrILws8mxe8iANrDSgAoIGm
    pmilcCc1eGyE3LbBEPvPFUzC
    =PqLN
    -----END PGP SIGNATURE-----


    begin 666 Clark Williams.vcf
    M0D5'24XZ5D-!4D0-"E9%4E-)3TXZ,BXQ#0I..E=I;&QI86US.T-L87)K#0I&
    M3CI#;&%R:R!7:6QL:6%M<PT*3DE#2TY!344Z0VQA<FL-"D]21SI7:7)E4W!E
    [email protected]]M;75N:6-A=&EO;G,L($-O<G!O<F%T:6]N#0I4251,13I#:&EE9B!4
    M96-H;[email protected]:6-E<@T*5$5,.U=/4DL[5D])0T4Z*[email protected]*#([email protected] T
    M+3DR-38-"E1%3#M#14Q,.U9/24-%.BLQ("@R-38I(#4R-RTW-C8R#0I414P[
    M5T]22SM&[email protected]*[email protected]*#([email protected]#,W+3,X,SD-"D%$4CM73U)+.CL[,S W(%=Y
    M;[email protected]')I=F4[2'5N='-V:6QL93M!3#[email protected]$-"DQ!0D5,.U=/4DL[
    M14Y#3T1)3D<]455/5$5$+5!224Y404),13HS,#<@5WEN;B!$<FEV93TP1#TP
    M04AU;G1S=FEL;&4L($%,(#,U.# U/3!$/3!!55-!#0I54DPZ#0I54DPZ:'1T
    M<#HO+W=W=RYW:7)E<W!E960N8V]M#0I%34%)3#M04D5&.TE.5$523D54.F-L
    M87)K0'=I<F5S<&5E9"YC;[email protected]*$-L87)K(%=I;&QI86US*0T*4D56.C(P,# P
    8-#$X5#$U-#<U-%H-"D5.1#I60T%21 T*
    `
    end
  • OSR_Community_UserOSR_Community_User Member Posts: 110,217
    At 05:12 PM 04/21/2000 -0500, you wrote:
    >Mcafee sells a personal PGP package for $19.99 for Windows.

    A programming library, or a standalone utility? I didn't know McAfee was in
    the programming tools business.
  • OSR_Community_UserOSR_Community_User Member Posts: 110,217
    At 02:51 PM 4/21/00 -0700, Richard Hartman wrote:
    >Any recommendations on cross-platform encryption libraries? Specifically, NT
    >and Unix / Linux / Solaris? Ideally, with source so we can compile locally?
    >We have a customer who is requesting that we encrypt the data we exchange
    >with them. Our end is NT, their end is Unix, and we'd prefer an
    >off-the-shelf commercial solution.

    There is RSA's BSAFE library. It's about as commercial and well tested as
    they come. You will have to pay license fees though. Are you looking for
    algorithms that don't require license fees? BSAFE is probably the code
    that's inside the Microsoft CryptoAPI service provider libraries.

    You didn't mention what kind of encryption. Are you looking for bulk
    symetric algorithms or public key exchange or something else? A big factor
    is: how do you expect to exchange keys with the other end. A digital
    certificate signed by Verisign or somebody. A phone call to exchange passwords?

    Also note that adding encryption has export implications. This has gotten
    much easier recently. I believe you do still have to submit a product for
    export approval with the US Commerce Dept.

    - Jan
  • OSR_Community_UserOSR_Community_User Member Posts: 110,217
    At 03:40 PM 04/21/2000 -0700, you wrote:
    >There is RSA's BSAFE library. It's about as commercial and well tested as
    >they come. You will have to pay license fees though. Are you looking for
    >algorithms that don't require license fees?

    Obviously, the cheaper the better <grin>. This is a low-quantity deployment
    between specific customers and us - not a broad-based public access thing.
    Total deployments will probably be in the low dozens.

    >You didn't mention what kind of encryption. Are you looking for bulk
    >symetric algorithms or public key exchange or something else? A big factor
    >is: how do you expect to exchange keys with the other end. A digital
    >certificate signed by Verisign or somebody. A phone call to exchange passwords?

    A phone call is probably sufficient. The keys won't change very often, so it
    can be handled manually. No third-party handling (i.e. Verisign) is required
    whatsoever. Our application is: Given a block of allocated memory full of
    data, encrypt it, transmit it, receive it at the other end into another
    allocated block, decrypt it, done.

    >Also note that adding encryption has export implications. This has gotten
    >much easier recently. I believe you do still have to submit a product for
    >export approval with the US Commerce Dept.

    Hmmm... I'd forgotten about that. Thanks for bringing it up.

    RLH
  • OSR_Community_UserOSR_Community_User Member Posts: 110,217
    > ----------
    > From: Richard Hartman[SMTP:[email protected]]
    > Reply To: NT Developers Interest List
    > Sent: Saturday, April 22, 2000 04:27
    > To: NT Developers Interest List
    > Cc: [email protected]
    > Subject: [ntdev] Re: Cross-Platform Encryption Libraries?
    >
    > At 03:40 PM 04/21/2000 -0700, you wrote:
    > >There is RSA's BSAFE library. It's about as commercial and well tested as
    > >they come. You will have to pay license fees though. Are you looking for
    > >algorithms that don't require license fees?
    >
    > Obviously, the cheaper the better <grin>. This is a low-quantity
    > deployment
    > between specific customers and us - not a broad-based public access thing.
    > Total deployments will probably be in the low dozens.
    >
    Take a look on RFC 2040 which describes RC5 implementation. It is easy to
    implement and verify this encryption algorithm according to this paper.

    Best regards,

    Michal Vodicka
    RKK Informationssysteme s.r.o.
    :We support your Future
    [WWW: http://www.rkk.cz , http://www.skytale.com]
  • OSR_Community_UserOSR_Community_User Member Posts: 110,217
    Ack! I missed that he wanted a library. Sorry.

    > -----Original Message-----
    > From: [email protected]
    > [mailto:[email protected]]On Behalf Of Richard Hartman
    > Sent: Friday, April 21, 2000 5:30 PM
    > To: NT Developers Interest List
    > Subject: [ntdev] RE: Cross-Platform Encryption Libraries?
    >
    >
    > At 05:12 PM 04/21/2000 -0500, you wrote:
    > >Mcafee sells a personal PGP package for $19.99 for Windows.
    >
    > A programming library, or a standalone utility? I didn't know
    > McAfee was in
    > the programming tools business.
    >
    >
    > ---
    > You are currently subscribed to ntdev as: [email protected]
    > To unsubscribe send a blank email to $subst('Email.Unsub')


    begin 666 Clark Williams.vcf
    M0D5'24XZ5D-!4D0-"E9%4E-)3TXZ,BXQ#0I..E=I;&QI86US.T-L87)K#0I&
    M3CI#;&%R:R!7:6QL:6%M<PT*3DE#2TY!344Z0VQA<FL-"D]21SI7:7)E4W!E
    [email protected]]M;75N:6-A=&EO;G,L($-O<G!O<F%T:6]N#0I4251,13I#:&EE9B!4
    M96-H;[email protected]:6-E<@T*5$5,.U=/4DL[5D])0T4Z*[email protected]*#([email protected] T
    M+3DR-38-"E1%3#M#14Q,.U9/24-%.BLQ("@R-38I(#4R-RTW-C8R#0I414P[
    M5T]22SM&[email protected]*[email protected]*#([email protected]#,W+3,X,SD-"D%$4CM73U)+.CL[,S W(%=Y
    M;[email protected]')I=F4[2'5N='-V:6QL93M!3#[email protected]$-"DQ!0D5,.U=/4DL[
    M14Y#3T1)3D<]455/5$5$+5!224Y404),13HS,#<@5WEN;B!$<FEV93TP1#TP
    M04AU;G1S=FEL;&4L($%,(#,U.# U/3!$/3!!55-!#0I54DPZ#0I54DPZ:'1T
    M<#HO+W=W=RYW:7)E<W!E960N8V]M#0I%34%)3#M04D5&.TE.5$523D54.F-L
    M87)K0'=I<F5S<&5E9"YC;[email protected]*$-L87)K(%=I;&QI86US*0T*4D56.C(P,# P
    8-#$X5#$U-#<U-%H-"D5.1#I60T%21 T*
    `
    end
  • OSR_Community_UserOSR_Community_User Member Posts: 110,217
    Richard,

    I'd suggest looking at:

    Crypto++ at http://www.eskimo.com/~weidai/cryptlib.html
    Cryptlib at http://www.cs.auckland.ac.nz/~pgut001/cryptlib/

    They are both cross-platform.

    For licensing terms, see:
    Crypto++: http://www.eskimo.com/~weidai/license.txt
    Cryptlib: http://www.cs.auckland.ac.nz/~pgut001/cryptlib/download.html

    There is a page comparing crypto libraries, but I cannot get to it. I don't
    know whether it's gone or whether there's just some DNS weirdness going on.
    In any case, the URL is:

    http://www.homeport.org/~adam/crypto/

    You could also try OpenSSL, which includes a crypto library. It's at
    http://www.openssl.org/.

    - Danilo
Sign In or Register to comment.

Howdy, Stranger!

It looks like you're new here. Sign in or register to get started.

Upcoming OSR Seminars
OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead!
Writing WDF Drivers 12 September 2022 Live, Online
Internals & Software Drivers 23 October 2022 Live, Online
Kernel Debugging 14 November 2022 Live, Online
Developing Minifilters 5 December 2022 Live, Online