On 11/18/2013 11:29 AM, Robert W Weaver wrote:
owner-openssl-us...@openssl.org (Kenneth
Goldman/Watson/IBM@IBMUS) wrote on 11/18/2013 10:03:29 AM:
 > Do not encrypt with a private key.  Encrypt with the public key and
 > decrypt with the private key.

Encrypt with a private key for integrity purposes: this shows that the
data that was encrypted corresponds to the owner of the key.
Encrypt with a public key for confidentiality purposes: this shows that
the data can only be received by the owner of the key.

I think in this case the trick would be to encrypt a cryptographically
sound hash of the source code.

While you're mathematically correct, common English usage would call the private key operation on a hash to be a signing operation, not encryption.





______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to