skar <[email protected]> writes:
[...]
> I have a file on my server which needs to reach several client machines
> safely and to remain encrypted there.
You may want to consider using PGP for this, it sounds like your
scenario is exactly what it was designed for. Each client would
generate its own private and public key, then the sender would add the
public keys to its PGP keychain and encrypt and sign a message to all
of them. PGP would take care of making this work (IIRC it would
encrypt the file using a symmetric key, then include copies of the
symmetric key encrypted with each recipient's public key).
An alternative would be to use straight symmetric cryptography, where
there is one secret key which is known by the server and all the
clients. Then you could just encrypt the data with something like:
openssl enc -aes-256-cbc
and on the other end use:
openssl dec -aes-256-cbc
Hope this helps!
-----Scott.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [email protected]
