[openssl-users] Generate ECC key with password protection

Ken Goldman kgoldman at us.ibm.com
Thu Jan 12 22:34:24 UTC 2017

On 7/20/2016 10:26 AM, Jakob Bohm wrote:
> On 20/07/2016 16:21, Ken Goldman wrote:
>> From these web pages:
>> https://wiki.openssl.org/index.php/Command_Line_Elliptic_Curve_Operations
>> https://www.openssl.org/docs/manmaster/apps/ecparam.html
>> the "openssl ecparam -genkey" command does not accept a password. The
>> (perhaps) equivalent "openssl genrsa" command does.
>> Is there a openssl command that can generate an ECC key pair where the
>> output file is password protected?
> openssl genpkey

My latest attempt is this.  It gives me a usage error.  Any hints?

openssl genpkey -out cakeyecc.pem -outform pem  -pass pass:rrrr 
aes-256-cbc -algorithm ec pkeyopt ec_paramgen_curve:prime256v1 -text

More information about the openssl-users mailing list