Hello,

[EMAIL PROTECTED] wrote on 03/29/2008 06:52:18 PM:

> Hello,
> 
> consider the following example:
> 
> You want to encrypt something using OpenSSL's AES 256 Bit encryption.
> You use the OpenSSL command line interface and specify an 8 character
> password. This means you specified 64 Bit (8 characters = 64 Bit) but
> want to use 256 Bit encryption.
> 
> How does the OpenSSL library "expand" the password? Does it do a digest
> of the user specified password to fill up the 256 Bit? Is there even a
> standard which describes this?
> 
> And finally is there a public interface where an application developer
> can pass a password and as a result he becomes a password of the
> specified length?
Try: PKCS5_PBKDF2_HMAC_SHA1()

Best regards,
--
Marek Marcola <[EMAIL PROTECTED]>

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to