OpenSSL - OpenSSL "genpkey -des" - DES Encrypt RSA Keys

OpenSSL "genpkey -des" - DES Encrypt RSA Keys

Q

How to generate a new RSA key pair and encrypt the output with a DES password using OpenSSL "genpkey" command?

✍: FYIcenter.com

A

If you want to secure your new RSA private key with a DES encryption, you can use the OpenSSL "genpkey -des" command as shown below:

C:\Users\fyicenter>\local\openssl\openssl

OpenSSL> genpkey -algorithm rsa -out my_rsa_des.key -des
..................................................++++++
..++++++
Enter PEM pass phrase: fyicenter
Verifying - Enter PEM pass phrase: fyicenter

Options used in this command are:

"-algorithm rsa" - Use RSA algorithm to generate private key and public key.
"-out my_rsa_des.key" - Save output (the new RSA private and public key) in a file.
"-des" - Encrypt the output with DES algorithm.
"fyicenter" - The password of the DES encryption.

⇒ OpenSSL "pkey" - Open Encrypted RSA Keys

⇐ OpenSSL "genpkey -pkeyopt rsa_keygen_pubexp:2" Runs Forever

⇑ OpenSSL "genpkey" Command for RSA Keys

⇑⇑ OpenSSL Tutorials

2017-12-31, 880👍, 0💬

OpenSSL "genpkey -pkeyopt rsa_keygen_pubexp:2" Runs Forever
What will happen if I use 2 as the public exponent to generate an RSA private key? OpenSSL will run forever, if you use 2 as the public exponent to generate an RSA private key, because OpenSSL can no find any private exponent to meet the RSA requirements. See the test below: C:\Users\fyicenter&g... 2017-09-08, 1321👍, 0💬

OpenSSL "genpkey -pkeyopt rsa_keygen_pubexp:1" - Bad RSA Key
Can I use 1 as the public exponent to generate an RSA private key? No. Using public exponent of 1 will generate identical RSA private key and public key as shown below: C:\Users\fyicenter>\loc al\openssl\opensslOpenSSL> genpkey -algorithm rsa -out rsa_test.key -pkeyopt rsa_keygen_bits:... 2018-01-06, 1287👍, 0💬

OpenSSL "pkey -aes*" - Re-Encrypt RSA Keys
How to re-encrypt an RSA key file using OpenSSL "pkey" command? I want to change the encryption password, and maybe change the encryption algorithm. If you want to encrypt an existing RSA key file again, you can use the "pkey -aes*" command as shown below: C:\Users\fyicenter>\loc al\openssl\op... 2017-09-12, 1033👍, 0💬

OpenSSL "genpkey -des" - DES Encrypt RSA Keys
How to generate a new RSA key pair and encrypt the output with a DES password using OpenSSL "genpkey" command? If you want to secure your new RSA private key with a DES encryption, you can use the OpenSSL "genpkey -des" command as shown below: C:\Users\fyicenter>\loc al\openssl\opensslOpenSSL... 2017-12-31, 881👍, 0💬

All rights in the contents of this web site are reserved by the individual author. fyicenter.com does not guarantee the truthfulness, accuracy, or reliability of any contents.