Osama Al-Dosary wrote:
>
> Hello,
>
> I'd like to encrypt a message. But I want the encryption to be
> Public-key.
>
> Does this do the trick?
>
> "openssl smime -encrypt -in signedFile.msg \
> -out encryptedFile.msg \
> -des3 recipientCert.pem"
>
> I was figuring that since the certificate had the Public-key, openssl
> generates a key for des3. Then it encrypts the message with that des3 key,
> and encrypts the des3 key with the Public-key using RSA.
>
> Is this the case?
>
Yes. It packages the lot up in a PKCS#7 signedData structure and outputs
the result in MIME format.
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]