Re: [openssl-users] How to turn on certain elements in CMS objects

2016-07-06 Thread Dr. Stephen Henson
On Wed, Jul 06, 2016, Stephan M?hlstrasser wrote: > So do I understand it correctly that OpenSSL currentls only supports > RFC3278? Does that mean that it can't process CMS enveloped data > objects that are created according to RFC5753? > OpenSSL should be able to decrypt either RFC3278 or

Re: [openssl-users] How to turn on certain elements in CMS objects

2016-07-06 Thread Stephan Mühlstrasser
Am 06.07.16 um 15:46 schrieb Dr. Stephen Henson: ... Second the following: 129 10: [1] { 1318: OCTET STRING B1 04 4A FD FC 8B 70 6D : } If I match this correctly to RFC 5652, this is ukm [1] EXPLICIT UserKeyingMaterial OPTIONAL inside the

Re: [openssl-users] How to turn on certain elements in CMS objects

2016-07-06 Thread Stephan Mühlstrasser
Am 06.07.16 um 16:02 schrieb Dr. Stephen Henson: On Wed, Jul 06, 2016, Dr. Stephen Henson wrote: On Fri, Jul 01, 2016, Stephan M?hlstrasser wrote: First the AlgorithmIdentifier includes the EC curve name: 40 19: SEQUENCE { 427: OBJECT IDENTIFIER

Re: [openssl-users] How to turn on certain elements in CMS objects

2016-07-06 Thread Dr. Stephen Henson
On Wed, Jul 06, 2016, Dr. Stephen Henson wrote: > On Fri, Jul 01, 2016, Stephan M?hlstrasser wrote: > > > > > First the AlgorithmIdentifier includes the EC curve name: > > > > 40 19: SEQUENCE { > > 427: OBJECT IDENTIFIER ecPublicKey (1 2 840 > > 10045 2

Re: [openssl-users] How to turn on certain elements in CMS objects

2016-07-06 Thread Dr. Stephen Henson
On Fri, Jul 01, 2016, Stephan M?hlstrasser wrote: > Hi, > > this message is related to another question that I sent with subject > "Unable to decrypt CMS object encrypted with EC prime256v1 > certificate". > > Below I have included the full ASN.1 dump of the CMS object > generated by a