Hi All,
I want to use PKI to encrypt some data and send it to the customer to be decrypted. With my limitied knowledge about PKI, the data can be encrypted using "private key" and then lateron that encrypted data could be decrypted with the "public key". While trying to find a way to achive the same, I've found an exmaple using the EVP Envelope interface (openssl-dir/tools/maurice/example1.c). But within this example, the data is encrypted via "public key" and decrypted via "private key". My questions are...
a. Shouldn't this be other way round? i.e encryption with public key and decryption with private key, perhaps PKI allows the usage this way, but is it the preferred way?? since in that case I have to provide the private key to the customer (along with the symetric key & intialzation vector) & also, private key is meant to be "private" not to be shared.
b. Secondly, is there any other interface or API that does the same (encrypt with pubkey and decrypt with privkey) without using symetric key and iv, so that I dont have to provide them to the customer for decryption.
Thanks for your time,
Kind Regards,
Usman.
PS: The data to be en/de-crypted is just 30-50 chars long, so performance is not an issue here.
FREE pop-up blocking with the new MSN Toolbar MSN Toolbar Get it now! ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
