[openssl-users] EVP_SealInit question

Norm Green norm.green at gemtalksystems.com
Mon Aug 15 22:09:16 UTC 2016


Ok, thanks.

What I don't understand is what key transport has to do with 
EV_SealInit() ?  Why is key transport important here ?

Norm Green

On 8/15/2016 2:38 PM, Dr. Stephen Henson wrote:
> On Mon, Aug 15, 2016, Norm Green wrote:
>
>> The man page for EVP_SealInit says:
>>
>> "The public key must be RSA because it is the only OpenSSL public
>> key algorithm that supports key transport."
>>
>> 1 ) Is this still true?
> Yes: the only algorithm we currently support which handles key transport is
> RSA.
>
>> 2) Will this restriction change now that RSA key transport is being
>> dropped from TLS 1.3 (or so I've read...)?
>>
> Don't undertand. The algorithm limitation has nothing to do with TLS
> restrictions.
>
> Steve.
> --
> Dr Stephen N. Henson. OpenSSL project core developer.
> Commercial tech support now available see: http://www.openssl.org



More information about the openssl-users mailing list