[openssl-users] AES-GCM failing from Command Line Interface

[Matt Caswell]

On 10/02/15 14:09, Sec_Aficionado wrote:
> Ah, thank you! I tried a lot of things and was very frustrated. I wish the documentation reflected that. I'll see if I can contribute by updating it.

It does:

https://www.openssl.org/docs/apps/enc.html
"The enc program does not support authenticated encryption modes like
CCM and GCM. The utility does not store or retrieve the authentication tag."

> 
> Regarding AES-GCM from the command line, or PHP bindings, is that something that any of the OpenSSL components support? I think EVP is the intended way but there are no PHP bindings, only C from what I can tell.

No - you can't do AES-GCM from the command line (things like s_server
and s_client support it - but that doesn't help you for what you want to
do). We don't supply the PHP bindings - you'll have to talk to the PHP
guys about that.

Matt