Is there any way to access the OpenSSL  PKCS5_PBKDF2_HMAC_SHA1()
function from a Perl Script or the command line.  I can't seem to
find any way to access this function except from C or other API's.


And how does this function differ from EVP_BytesToKey() expecially
when given a large iterative count (ic)


Finally why does the  openssl commands 'enc' only us a ic of 1???
Wouldn't that mean that a brute force dictionary attack on a
file encrypted with openssl commands 'enc' method be quite fast?
given that encryption method is known  (the salt is in the file)


Basically I am wanting to do is create a stronger openssl 'encrypted
file' with not only a random 'salt' but a large 'ic' as well, and
without the stupid 'Salted__' header magic that openssl 'enc' generates.

Perhaps an encrypted file format something of the form....
   * 16 bytes of random salt
   *  4 bytes for the ic count in network number format
   * rest Encrypted data

Using a Harecoded AES encryption, and the password PBKDF2 hashed
to generate the cryptographic KEY and IV for the encryption.

My main problem is I want to do this in a Perl script!

Comments Welcome.

  Anthony Thyssen ( System Programmer )    <a.thys...@griffith.edu.au>
 --------------------------------------------------------------------------
   The more knowledge you know, the less you know, that you know you know.
 --------------------------------------------------------------------------
   Anthony's Castle     http://www.cit.griffith.edu.au/~anthony/
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to