Look at the PSK ciphers; the callbacks should be able to call your generator... -- Senior Architect, Akamai Technologies Member, OpenSSL Dev Team IM: richsalz at jabber.at Twitter: RichSalz