Hi, crypto guys!

I have problem with  EVP_PKEY_decrypt() function and 4K RSA private key
decrypting data encrypted with EVP_PKEY_encrypt() and corresponding
public key. Keys generated using openssl CA shell script.

EVP_PKEY_decrypt() just returns -2 saying that this key is not
supported. BUT! RSA_private_decrypt() works just fine with this key and
successfully decrypts data encrypted by EVP_PKEY_encrypt()! Sign and
verify operations works fine with EVP_PKEY_sign() and EVP_PKEY_verify()
with the same keys.

I use openssl 1.0.1c.

The questions are:

1. Is there some meaningful limitation coded into EVP_PKEY_decrypt()
that does not allow decrypt operation?
2. If no such limitations, how I can make it work with 4K RSA keys?

-- 
SY, Alex Lukin
RIPE NIC HDL: LEXA1-RIPE

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to