Tuesday, December 5, 2017

OpenSSL FIPS 140-2 - Part Two - Unix OS

Compiling OpenSSL with the FIPS module on Unix-ish operating systems like Linux and Cygwin is pretty straightforward.

I was not able to correctly build the FIPS module on 64-bit Cygwin. There’s a bug in the ./config script that prevents it from compiling. I could get around the issue by running ./Configure linux-generic64 instead of the standard ./config script, but that would violate the mandated build procedure. The 32-bit version of Cygwin compiles everything without issue.

If you’d like to use the Cygwin compiled openssl.exe binary on a Windows system without Cygwin installed, copy the cygwin1.dll and cyggcc_s-1.dll files from the Cygwin bin directory and put it in the same directory as the openssl.exe file. Of course, it makes more sense to simply use the native Windows OS build.

Tuesday, November 21, 2017

OpenSSL FIPS 140-2 - Part One - Security and the infinite regress fallacy

Building the FIPS object module for OpenSSL must be done in a very strict manor. Deviation from the mandated compilation instructions means we cannot consider the resulting binaries as validated. They would then require “private label” validation that costs thousands of dollars. Let’s try to avoid that, shall we?

Tuesday, November 7, 2017

Encrypting “Data At Rest” Using FIPS 140-2 Cryptographic Modules

Sensitive information falling into the wrong hands is a major security concern. The US government’s latest approach to combat this problem is to essentially encrypt everything that transmits or stores data. VPNs or secure socket layers protect data flowing across networks.  Data at rest, which is data stored on physical mediums like hard drives, CD-Rs, DVD-Rs, USB sticks, etc., must also be protected. Hard drive encryption is easy since most modern enterprise-level operating systems include this feature. Removable storage, on the other hand, is a hodge-podge of solutions and very few of them are compatible with each other.

Tuesday, October 3, 2017

Low Carb Sweet and Sour Sauce Ice Cream

There was a video I watched a while back where a bunch of weird ice creams were made and the guests tried each of them. One that surprised them both was sweet and sour sauce ice cream. I don’t think they actually tried an ice cream made with sweet and sour sauce. I think it was actually duck sauce. I say this because of the ice cream’s color in the video. Duck sauce is a mixture of vinegar with apricot and peach flavors. Sweet and sour sauce is pineapple, vinegar, brown sugar, ketchup, garlic, and soy sauce. A duck sauce flavored ice cream isn’t a stretch of the imagination. But real sweet and sour sauce? Ketchup and soy sauce in ice cream?! Could this actually work?

Tuesday, September 5, 2017

Low Carb Kulfi Ice Cream

I found a recipe for kulfi ice cream in Malcolm Stogo’sIncredible Ice Cream” book. Malcolm says, “Kulfi is the traditional Indian ice cream and has a strong cooked-milk flavor and a dense texture.”
In India, Kulfi is served in cone-shaped, lidded metal containers that are rubbed between the hands to warm and release the flavor of the ice cream. It is a very time-consuming flavor to prepare and I am not sure it is suited to an American palate. The overall taste is interesting and makes a terrific dessert after an Indian curry meal.

Tuesday, June 6, 2017

Low Carb Banana Curry Ice Cream

This flavor was inspired by Lindsay Clendaniel. She concocted a banana curry ice cream using mashed up bananas, brown sugar, lemon juice, and sweet curry powder. Curries are like fingerprints: each one is unique. I made sure to purchase the same one she used in the original.

Thursday, June 1, 2017