Hi, Of course the randomly-generated symmetric key is not public! Otherwise, everyone can decrypt your data. The only thing that is public is the RSA public key. For decryption, you only need the RSA private key. It will be used to decrypt the symmetric key and then with the later you will decrypt your string.
I hope this clarifies things to you. Cheers, -- Mounir IDRASSI IDRIX http://www.idrix.fr > Hi, > Thanks for the reply Phillip. One quick question. Is the > randomly-generated > key PUBLIC? I know the public RSA key to encrypt the key is public, but is > the randomly-generated key PUBLIC? > Thanks. > > On Thu, Jul 8, 2010 at 8:43 PM, Phillip Hellewell <ssh...@gmail.com> > wrote: > >> The general approach is to encrypt data using a symmetric cipher (e.g., >> AES-256) with a randomly-generated key, and then encrypt that symmetric >> key >> with the RSA (public) key. >> >> And for the symmetric encryption you'll also have to make a decision >> about >> what mode to use (ECB, CBC, CTR, etc). Whatever you do, don't use ECB >> :) >> >> Phillip >> >> >> On Thu, Jul 8, 2010 at 7:40 PM, Chuck Pareto <chuckda...@gmail.com> >> wrote: >> >>> Is there an algorithm that I can use, similar to RSA with >>> public/private >>> key, that will allow me to encrypt really long strings (like an >>> email/text >>> file)? Actually no limit on the size would be ideal. >>> >> >> > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
