RE: RSA_private_decrypt without e and d

2011-02-25 Thread Marek . Marcola
to openssl-users@openssl.org To openssl-users@openssl.org cc Subject RE: RSA_private_decrypt without e and d Hi Marek, My understanding was that while it's mathematically possible, from an OpenSSL API perspective there is no way to do it. Did I misunderstand? -Original

Re: RSA_private_decrypt without e and d

2011-02-24 Thread Victor Duchovni
On Thu, Feb 24, 2011 at 08:15:47AM +0100, Mounir IDRASSI wrote: Your analysis is not true because the original poster says he has dmp1, dmq1 and iqmp, not only p and q. Yes, naturally if the OP has d (or equivalently d mod (p-1) and (q-1), which are presumed co-prime), he can recover e if he

RE: RSA_private_decrypt without e and d

2011-02-24 Thread Shaheed Bacchus (sbacchus)
: RSA_private_decrypt without e and d Hi Shaheed, The OpenSSL error you are getting means that OpenSSL decrypted the ciphered text but couldn't find the PKCS1 padding byte. This means that the wrong CRT parameters were supplied. Usually this comes from the fact that the parameters p and q

RE: RSA_private_decrypt without e and d

2011-02-24 Thread Marek . Marcola
02/24/2011 05:21 PM Please respond to openssl-users@openssl.org To openssl-users@openssl.org cc Subject RE: RSA_private_decrypt without e and d Thanks Mounir and Marek, I will try to recover these parameters. -Original Message- From: owner-openssl-us...@openssl.org

RE: RSA_private_decrypt without e and d

2011-02-24 Thread Shaheed Bacchus (sbacchus)
Sent: Thursday, February 24, 2011 11:23 AM To: openssl-users@openssl.org Cc: openssl-users@openssl.org; owner-openssl-us...@openssl.org Subject: RE: RSA_private_decrypt without e and d Hello, Remember, you do not need to recover this parameters to decrypt message. Best regards, -- Marek Marcola

RSA_private_decrypt without e and d

2011-02-23 Thread Shaheed Bacchus (sbacchus)
Hi, I have a situation where I have a message that has been encrypted via RSA_public_encrypt. On the receiving end I have the n, p, q, dmp1, dmq1, and iqmp components (I know it might sound odd that I don't have the e and d components but that is the case). I'm trying to do something like:

RE: RSA_private_decrypt without e and d

2011-02-23 Thread Shaheed Bacchus (sbacchus)
@openssl.org Subject: RSA_private_decrypt without e and d Hi, I have a situation where I have a message that has been encrypted via RSA_public_encrypt. On the receiving end I have the n, p, q, dmp1, dmq1, and iqmp components (I know it might sound odd that I don't have the e and d components

Re: RSA_private_decrypt without e and d

2011-02-23 Thread Victor Duchovni
On Wed, Feb 23, 2011 at 09:03:13PM -0600, Shaheed Bacchus (sbacchus) wrote: Just to be clear, below is not the actual code, but what I would *like* to be able to do (or something close). What you are asking to do is not possible, not because of API limitations, but as a matter of principle

Re: RSA_private_decrypt without e and d

2011-02-23 Thread Marek . Marcola
...@morganstanley.com Sent by: owner-openssl-us...@openssl.org 02/24/2011 05:50 AM Please respond to openssl-users@openssl.org To openssl-users@openssl.org cc Subject Re: RSA_private_decrypt without e and d On Wed, Feb 23, 2011 at 09:03:13PM -0600, Shaheed Bacchus (sbacchus) wrote

Re: RSA_private_decrypt without e and d

2011-02-23 Thread Marek . Marcola
-openssl-us...@openssl.org 02/24/2011 03:52 AM Please respond to openssl-users@openssl.org To openssl-users@openssl.org cc Subject RSA_private_decrypt without e and d Hi, I have a situation where I have a message that has been encrypted via RSA_public_encrypt

Re: RSA_private_decrypt without e and d

2011-02-23 Thread Mounir IDRASSI
Hi Victor, Your analysis is not true because the original poster says he has dmp1, dmq1 and iqmp, not only p and q. With these 5 parameters, it is possible to recover the plain text from the ciphered text thanks to the Chinese Reminder Transformation (CRT). Moreover, it is possible to recover