[openssl-users] Regarding the security of the keys

Salz, Rich rsalz at akamai.com
Tue Jul 21 08:48:47 UTC 2015


> If some one build their own openssl and add few lines to print the keys during encrypt and decrypt and put in the library in the LD_LIBRARY_PATH, may result in compromising the security of the keys.

Can anyone other than root do this?  You have to trust root.  They could just cat your keyfile anyway.



More information about the openssl-users mailing list