Osama Al-Dosary wrote:
> 
> Hello,
> 
> I'd like to encrypt a message. But I want the encryption to be
> Public-key.
> 
> Does this do the trick?
> 
>         "openssl smime -encrypt -in signedFile.msg \
>                 -out encryptedFile.msg \
>                 -des3 recipientCert.pem"
> 
> I was figuring that since the certificate had the Public-key, openssl
> generates a key for des3. Then it encrypts the message with that des3 key,
> and encrypts the des3 key with the Public-key using RSA.
> 
> Is this the case?
> 

Yes. It packages the lot up in a PKCS#7 signedData structure and outputs
the result in MIME format.

Steve.
-- 
Dr Stephen N. Henson.   http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED] 
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the   OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to