[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Help-gnutls] Dynamically building the PSK keys

From: Nikos Mavrogiannopoulos
Subject: Re: [Help-gnutls] Dynamically building the PSK keys
Date: Mon, 13 Jul 2009 23:10:09 +0300
User-agent: Thunderbird (X11/20090608)

Ram G wrote:
> Hi,
> I'm working on the sample programs provided in the source examples folder
> and I would like some help from you. I'm trying to do a DH key exchange with
> PSK authentication.
> The client sample (ex-client-psk.c) assigns the pre shared key as follows:
> const gnutls_datum_t key = { (char*) "DEADBEEF", 8 };
> The server sample (ex-serv-psk.c) does the key assignment in the callback
> function pskfunc as follows:
>   key->data = gnutls_malloc (4);
>   key->data[0] = 0xDE;
>   key->data[1] = 0xAD;
>   key->data[2] = 0xBE;
>   key->data[3] = 0xEF;
>   key->size = 4;

It is not the same as above. Above you use 8 bytes and here 4. Use instead:
   key->data[0] = 'D';
   key->data[1] = 'E';
   key->data[2] = 'A';
   key->data[3] = 'D';
   key->data[4] = 'B';
   key->data[5] = 'E';
   key->data[6] = 'E';
   key->data[7] = 'F';
   key->size = 8;

> I would like to assign the pre-shared key dynamically. If I assign the PSK
> in the server as follows, it does not work. I get the error "Decryption has
> failed".

Actually how the keys are going to be generated? You have to think about
that seriously and make sure that the key generation is not weakening
the cryptosystem. To be on the safe side, and especially if you are not
experienced in the field use the tools provided by gnutls for the key


reply via email to

[Prev in Thread] Current Thread [Next in Thread]