小宋的专栏

  提到网络安全，不得不说说这个“中间人”攻击。 先讲个故事吧，2k年的时候很喜欢五子棋，不管上课下课找人就下，奈何周围高手甚众，屡战屡败，到263的网络游戏找菜鸟pk，也是败多胜少。于是在电脑上修炼，下个中级的电脑都很吃力。发现高级电脑计算精准，妙招频出，忽然想到个点子，可以用电脑帮我赢棋啊。操作如下： 到游戏室找人PK，让对方先手，同时自己先手与本机的高级电脑开局。我把网上对手的每一步

Undoubtedly socket BIO is a splendid socket interface implemented in C language, to some extent it have Object Oriented Programming thinking in C language, and provides more OS compatibility. Well

In order to work with the Java Card, we need to implement the algorithm ALG_DES_MAC8_ISO9797_1_M2_ALG3 outside the card.  Here is the instruction from Java Card Application Programming Interface:

CTR is also an encryption mode, just use a counter as IV, and use IV’s cipher xor plain data by bytes.Cause x ^ y ^ y = x, we can see that the encrypt and decrypt function are the same. And as there

Normal 0 7.8 磅 0 2 false false false MicrosoftInternetExplorer4 <!-- /*

Normal 0 7.8 磅 0 2 false false false MicrosoftInternetExplorer4 <!-- /* Fo

Well, with the commercial use of 3G,more and more application will flourish in the mobile platform. And most of theimplement is associated with security such as payment, E-bank, DRM and so on. So

1.    Steps to new a application    a)    New a smart device project    b)    Add additional include directory: ../celib; ../celib/openssl; ../celib/include;    The last path is where the wcecompa

Normal 0 7.8 磅 0 2 false false false MicrosoftInternetExplorer4 Accordingto PK

BIO_s_accept can be used as an server socket object, and has it’s own data struct BIO_ACCEPT, which is stored in BIO.ptr. in the struct, a status value BIO_ACCEPT.state is introduced to record the cur

And still there is very little information on EC in OPEN SSL, I will explain more and give more code. Firstly introduce ECC(Elliptic Curve Cryptography), from the math book: In 1985, Elliptic

  The EVP have provided a function EVP_BytesToKey() to generate session key and initial vector. And we can use the function to separate the input password to gain our secrete key or session key. And

    Symmetric encryption with EVP Steps As follows: notes that cipher buffer length should be one block size longer.  // 1, initial the CTX truct  EVP_CIPHER_CTX_init(&ctx);    // 2,

Easy, nothing more to say.Sample code:     const EVP_MD *md = EVP_sha1();    EVP_MD_CTX ctx;    unsigned char md_buf[EVP_MAX_MD_SIZE];    unsigned int mdLen = 0;     EVP_MD_CTX

 A easier way to digest. Only notes that BIO_f_xx() algorithm is a filter BIO, can’t be used alone, you have to combine a BIO_s_xx() to go with it, which stands for a source BIO. Sample function c

 Well, it’s a little bit complicated and there are so little documents on socket BIO, so I will give more instruction and more sample codes. First introduce some key points. a)      There are

BIO_s_connect can be used as an client socket object, and has its private data struct BIO_CONNECT, which is stored in BIO.ptr.In the struct, a status value int BIO_CONNECT.state is introduced to rec

It’s not an easy job, careful design and consideration is needed to make memory allocation and free robust and efficiency. Here just go through the way Open SSL conducting memory leak. Here just give

Key pair generation:    1, chooses a kind of Elliptic Curve. The OPEN provides 67 kinds of EC, and you can get the EC list by calling EC_get_builtin_curves();    2, initial the group information,

HMAC implementation， OPENSSL, Crypto API(CSP), android native, windows mobile, Symbian