Tag: #openssl
An encrypted diary using OpenSSL
Generate a master keypair. Encrypting each diary entry with a one-time shared secret. Encrypt the shared secret with the public key. Decrypt entries using the private key and the shared secret. 2017-12-03
The sorry state of OpenSSL usability
OpenSSL’s inadequate documentation, confusing key formats, and deprecated interfaces make it difficult to use, despite its importance. 2017-12-02
What is ASN.1?
ASN.1 is a data format used to encode structured data like RSA private keys and certificate signing requests. Using
openssl asn1parse to reveal its structure. 2017-11-30How do I create a message digest using
openssl? Create message digests using the
openssl dgst command, specifying the hash algorithm (e.g. -sha512) and optionally signing with a shared password using -hmac. 2017-03-13How do I hash a password with
openssl? The
openssl passwd command hashes passwords using the outdated crypt algorithm, with truncation to 8 characters - a poor choice for secure password hashing. 2017-03-12How do I fetch a server’s SSL certificate using
openssl? Use the
openssl s_client command to fetch a server’s SSL certificate chain, including the root certificate. 2017-03-11How do I generate random bytes with
openssl? Generate random bytes with
openssl rand, which uses a PRNG seeded with entropy from ~/.rnd. 2017-03-10How do I encrypt text with
openssl? Encrypt and decrypt text using the
openssl enc command with a password and AES-256 cipher. The encrypted text is base64-encoded. 2017-03-09All content copyright James Fisher.
Granola