PyAnN9uGUTBCDYeTwdw8TEzkyaL08FkzLfFbS2N9BDksA3rpI1cxpxRVFr9+jDBz veiBO9xHMGV01YBNeic7MqXBkhIrNZW6pPRfrbjsBMBGSsL8nwJbb3wvHhzPkeMĮ+wtt9S5PWhcnGMj3T+2mtFfW6HWpd8Kdp60z7Nh5mhA9+5aDWREfJhJYzl1zfcvīmxjf2wZ3sFJNty+sQVajYfk6UXMyJIuWgAjnqjw6c3vxQi0KE3NUNZYO93GQgEF JJjUVPPHoKZ7j4QpwzbPGrz/hVeMXVT/圓3ZEEA+3nrobwisLKz+Q+C9TVJU3m7M PdKj8Gm5eeAOF0RHzBx8l1tjmA1HSSvy0RF42bOeb7sEVZtJ6pMnrJ26ouwTQnkL pem file that the command generated-but all you will see is a bunch of text on the screen: alice $ head alice_private.pemĭEK-Info: AES-128-CBC,E26FAC1F143A30632203F09C259200B9 If you are curious about what the key file looks like, you can open the. 1 bob bob 986 Mar 22 13:48 bob_private.pem Verifying - Enter pass phrase for bob_private.pem: 1 alice alice 966 Mar 22 17:44 alice_private.pemīob follows the same procedure to create his key pair: bob $ openssl genrsa -aes128 -out bob_private.pem 1024 Verifying - Enter pass phrase for alice_private.pem: Generating RSA private key, 1024 bit long modulus (2 primes) It also uses aes128, a symmetric key algorithm, to encrypt the private key that Alice generates using genrsa.Īfter entering the command, OpenSSL prompts Alice for a passphrase, which she must enter each time she wants to use the keys: alice $ openssl genrsa -aes128 -out alice_private.pem 1024 This is possible because the RSA algorithm is asymmetric. This command uses OpenSSL's genrsa command to generate a 1024-bit public/private key pair. You will also need a passphrase, which you must use whenever you use OpenSSL, so make sure to remember it.Īlice generates her set of key pairs with: alice $ openssl genrsa -aes128 -out alice_private.pem 1024 Step 1: Generate key pairsīefore you can encrypt files, you need to generate a pair of keys. To explore file encryption and decryption, imagine two users, Alice and Bob, who want to communicate with each other by exchanging encrypted files using OpenSSL. The tool is usually installed by default by most Linux distributions if not, you can use your package manager to install it: $ cat /etc/fedora-release This demo uses a Fedora machine with OpenSSL installed. OpenSSL is an amazing tool that does a variety of tasks, including encrypting files.
Hence the descriptor "key-pair" the set of keys goes hand-in-hand. The only way you can decrypt your sender's encrypted message is by using your private key. If someone wants to communicate sensitive information with you, you can send them your public key, which they can use to encrypt their messages or files before sending them to you. The other, the private key, is supposed to be a secret and never shared. One is the public key and can be freely shared with anyone you want to communicate with secretly. Public-key encryption uses two sets of keys, called a key pair. Webinar: Automating system security and compliance with a standard operating system.
0 kommentar(er)
