On 07/15/2014 08:05 PM, Chuck Lee wrote:
Yes, but it doesn't work because it also calls PK11_ExportPrivKeyInfo() to get the RSA private key info.Now I am trying to decrypt key exported by PK11_ExportEncryptedPrivKeyInfo() with method SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_40_BIT_RC4 directly, which seems to be the most simple method to decrypt.
Hmm, 1) are you sure you used that method to export the key? It's not a very strong algorithm, the PKCS #12 files use it to wrap the certificate, not the key itself. 2) If you want to decrypt, you need to use that method to generate a PBE key and use it to export.
bob
smime.p7s
Description: S/MIME Cryptographic Signature
-- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
