Re: [openssl-dev] about enc 'magic' data and salt handling

2017-01-14 Thread Viktor Dukhovni
> On Jan 13, 2017, at 7:50 PM, Tom Francis wrote: > > > The enc command is really just an example, IMO. If you want something that's > useful for production purposes (and even follows standards!), I recommend > looking at the cms command. It'll encrypt, decrypt, sign (and verify > signatures

Re: [openssl-dev] about enc 'magic' data and salt handling

2017-01-14 Thread Michel
> If you want something that's useful for production purposes (and even follows > standards!), > I recommend looking at the cms command. Yes, thanks for pointing out that to me. However I believe that for production purposes I would even prefer using gpg (thanks to M. Zimmermann). Regards, Mic

Re: [openssl-dev] about enc 'magic' data and salt handling

2017-01-13 Thread Tom Francis
> On Jan 13, 2017, at 6:34 PM, Michel wrote: > > Hi, > > FWIW, just sharing my opinion : > > Thanks to the team, OpenSSL comes with lots of powerful tools. > They are not always easy to use, but some have no equivalent and are very > helpful to test, debug, experiment, learn … all things th