Problem - Kevin Tafuro

EVP_CIPHER_CTX_set_padding( ), 227
EVP_DecryptFinal_ex( ), 232
EVP_DecryptInit( ), 223
EVP_DecryptInit_ex( ), 222
EVP_DigestFinal( ), 265
EVP_EncryptFinal_ex( ), 231, 232
EVP_EncryptInit( ), 223
EVP_EncryptInit_ex( ), 222, 227
EVP_EncryptUpdate( ), 231, 232
EVP_get_cipherbyname( ), 223
EVP_MD_CTX_size( ), 265
exception handling, 700–704
C++, 701
XXL, compared to, 702–704
C language, 702
XXL library, 702
exchange keys, 245
exclusive locks, 59
exec*( ) family of functions, 28–33
executing external programs securely
Unix, 28–33
Windows, 33
execv( ), 30
execve( ), 25, 29, 30
extKeyUsage extension, 562
extracting raw key data from a CryptoAPI key
object, 246–248
F
FascistCheck( ), 392
fchmod( ), 56
FD_*( ) family of macros, 112
fd_set data type, 112
Fergusen, Niels, 170
file descriptors, 23–25
closing of nonstandard descriptors, 25
stdin, sdout, and stderr, 23
file encryption, 213–217
using LION, 214–217
with initialization vectors or nonces, 213
file information, accessing securely, 53
filename validation, 97–99
and path validation, 97
files
creating for temporary use, 65–68
Unix, 66
Windows, 66
encryption of, 213–217
using LION, 214–217
with initialization vectors or
nonces, 213
erasing securely, 47
746 | Index
locking, 57–59
for resource access
synchronization, 60
permission bits, 39–41
setgid bit, 40
setuid bit, 40
sticky bit, 39
filesystems, restricting access
in BSD, 69
in Unix, 68
fingerprints, 503
whitelist checks, using for, 544–547
in CryptoAPI, 545
in OpenSSL, 544
FIPS 140 standards, 616
FIPS 140-1 tests, 615–621
continuous output test, 619–620
power-up and on-demand tests, 617–619
Long Runs test, 618
Monobit test, 617
Poker test, 617
Runs test, 618
FIPS 140-2 tests, 616
fopen( ), 43, 56
fork( ), 20, 26
FormatGuard, 77
format-string attacks, preventing, 75–78
forward secrecy, 367
public key cryptography, provision
in, 445
symmetric cryptography, provision
in, 444
fread( ), 576
free( ), 93
fstat( ), 24, 54
function errors and security, 700
This is the Title of the Book, eMatter Edition
Copyright © 2007 O’Reilly & Associates, Inc. All rights reserved.
G
GCC compilers, 647
generate_and_package_128_bit_secret( ),
344
generating an RSA key pair, 327–329
generating prime numbers, 323–327
generating random passwords and
passphrases, 387–391
generating random symmetric keys, 119
generating symmetric keys from one
secret, 142
GetDistributionPoint( ), 558, 559
getdtablesize( ), 24
getenv( ), 92
environment variables and, 2