Hello, > just a side note: > > RSA private keys can be used to encrypt data that can be decrypted > with the public key. > > RSA public keys can be used to encrypt data that can be decrypted with > the private key. Thats true, "signing" is technically nothing else as encrypting some data (md hash) with private key. Where "verifying" is decrypting some data with public key (with added memcmp() magic :-). Command "openssl" can not encrypt with private key because is written in this way, not because it is not possible. My suggestion is to write little utility for this purpose using RSA_private_encrypt()/RSA_public_decrypt() functions which will be 2 page long. And may be called from Python. If someone really wants this functionality of course :-)
Best regards, -- Marek Marcola <[EMAIL PROTECTED]> ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [EMAIL PROTECTED]
