>From: owner-openssl-us...@openssl.org On Behalf Of naveen >Sent: Saturday, 13 October, 2012 21:59
>I have a question related to openssl. I need to give two keys >k1 and k2 for ede encryption(for des). Now how do I give it in >the command line ? >I see that there is a "pass" parameter and "iv" parameter, but >I could not figure out how to give the two keys. Please help me with this. Commandline 'enc' has several ways to specify a passphrase of which -pass is one, but all of them use PKCS#5 (actually I believe a slight variant) to derive the actual key from the passphrase. If you have an actual key to use, you do NOT want key derivation. Use -K. DES-EDE uses a triple-length key, which can be expressed as three pieces of 8 bytes K1,K2,K3 or a single key of 24 bytes K1K2K3. By convention, it is also used with a double-length key K1,K2 or K1K2 by repeating K1: K1,K2,K1 or K1K2K1. openssl and 'enc' use the one-piece representation so use -K K1K2_in_hex . ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
