Re: Using EVP_PKEY with EVP_EncryptInit_ex

2020-04-02 Thread Matt Caswell
On 01/04/2020 18:01, Andrew Felsher wrote: > I'm aware of the symmetric/asymmetric differences. But the EVP_Enrypt... > API takes the key as a bunch of bytes. It shouldn't care whether it's an > RSA key or not, correct? (Though perhaps it would truncate to, in my > case, the first 128 bits since

Re: Using EVP_PKEY with EVP_EncryptInit_ex

2020-04-01 Thread Andrew Felsher
I'm aware of the symmetric/asymmetric differences. But the EVP_Enrypt... API takes the key as a bunch of bytes. It shouldn't care whether it's an RSA key or not, correct? (Though perhaps it would truncate to, in my case, the first 128 bits since I'm using AES-128-XTS.) But assuming that I can't so

Re: Using EVP_PKEY with EVP_EncryptInit_ex

2020-04-01 Thread Matt Caswell
On 01/04/2020 17:34, Andrew Felsher wrote: > Hi, > > I'm trying to do what I assumed would be a very common and typical use > of OpenSSL. I'm just encrypting and decrypting some data (in code; not > from command line). EVP_EncryptInit_ex (and decrypt, update, and final > variants) are the stand

Re: Using EVP_PKEY with EVP_EncryptInit_ex

2020-04-01 Thread Dmitry Belyavsky
Dear Andrew, You should take a look at CMS implementation as a model. For example, you can generate a symmetric key for content encryption and algorithm-specific way to pass the symmetric key to the recipient using EVP_PKEY_encrypt. On Wed, Apr 1, 2020 at 7:35 PM Andrew Felsher wrote: > Hi,

Using EVP_PKEY with EVP_EncryptInit_ex

2020-04-01 Thread Andrew Felsher
Hi, I'm trying to do what I assumed would be a very common and typical use of OpenSSL. I'm just encrypting and decrypting some data (in code; not from command line). EVP_EncryptInit_ex (and decrypt, update, and final variants) are the standard way to do this. However, the init functions take a ch