Hello, > 1)Is there a publication for the way the iv and the key are generated from the text > based password? > I assume that enc uses the same method for all modes. > > 2)Is there a publication for how the salt integrates into the cipher, and the > determination of the key and iv? > > I am trying to develop a javascript program that is compatible with openssl in this area. > > Thus far I have implemented aes-cbc and aes-ecb that takes a key and iv (in the case of cbc). > Once I figure out how to generate the key and iv the same openssl does I am set. > Using the salt would be an added benefit. Look at PKCS#5 document (especially PBKDF2 function), this function is implemented in OpenSSL as PKCS5_PBKDF2_HMAC_SHA1() function.
Best regards, -- Marek Marcola <[EMAIL PROTECTED]> ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]