Hello, I'm using the openssl command line S/MIME tool. I have a question about how somethings work. Problem description: I'd like to encrypt a message that I have already signed using openssl clt (command line tool). I want the encryption to be Public-key. I already know the recipient's certificate. I couldn't figure how to do that exactly. I thought this might do it: "openssl smime -encrypt -in signedFile.msg \ -out encryptedFile.msg \ -des3 recipientCert.pem" I was figuring that since the certificate had the Public-key, openssl ctl generates a key for des3. Then it encrypts the message with that des3 key, and encrypts the des3 key with the Public-key using RSA. It would seem insecure to do a symmetric key encryption with part of (or a function of) a public key. Am I correct in my assumptions? If not, how can I use the command line tool for encrypting the message using public-key cryptography (RSA)? Thank you, -Osama ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]