On Tue, Dec 14, 2010 at 09:46:11PM -0800, Kannan J wrote: > I'm copying and pasting the text from the smart card guide. It is too big to attach.
Please use plain-text (non-HTML) email when sending mail to lists. > The following convention applies for the P, Q, DP1, DQ1, and PQ parameters: > P is the smallest RSA prime > Q is the other RSA prime > ... > PQ = P-1 mod Q Then "PQ" is not a product, rather the value "P-1" mod Q. So what's the issue? > NOTE: For the key being loaded, Size of (P) must be equal to Size of (Q) and > this value must be half > the size of modulus. For example: For RSA 2048-bit key, modulus size is 256, > and size (P) , Size (Q) are half the modulus size, (I.e.) 128 bytes Perhaps your primes are not exactly 128-bytes long? They may need to be padded with leading zeros. -- Viktor. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org