Hello,

I'm using the openssl command line S/MIME tool. I have a question about
how somethings work.

Problem description:
I'd like to encrypt a message that I have already signed using openssl
clt (command line tool).
I want the encryption to be Public-key. I already know the recipient's
certificate.

I couldn't figure how to do that exactly. I thought this might do it:
        "openssl smime -encrypt -in signedFile.msg \
                -out encryptedFile.msg \
                -des3 recipientCert.pem"

I was figuring that since the certificate had the Public-key, openssl ctl 
generates a key for des3. Then it encrypts the message with that des3 key,
and encrypts the des3 key with the Public-key using RSA.

It would seem insecure to do a symmetric key encryption with part of
(or a function of) a public key.

Am I correct in my assumptions? 
If not, how can I use the command line tool for encrypting the message
using public-key cryptography (RSA)?

Thank you,
-Osama



______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to