Turns out there is wrong information in "Network Security with OpenSSL" about using EVP_SealInit. It indicates that you are to pass in an init vector, but EVP_SealInit generates one and passes it back to the caller. Once I figured this out, I got everything to work.
Mike ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]