Lines Matching +full:4 +full:- +full:data
1 .\" -*- mode: troff; coding: utf-8 -*-
57 .IX Title "OPENSSL-RSAUTL 1ossl"
58 .TH OPENSSL-RSAUTL 1ossl 2025-09-30 3.5.4 OpenSSL
64 openssl\-rsautl \- RSA command
68 [\fB\-help\fR]
69 [\fB\-in\fR \fIfile\fR]
70 [\fB\-passin\fR \fIarg\fR]
71 [\fB\-rev\fR]
72 [\fB\-out\fR \fIfile\fR]
73 [\fB\-inkey\fR \fIfilename\fR|\fIuri\fR]
74 [\fB\-keyform\fR \fBDER\fR|\fBPEM\fR|\fBP12\fR|\fBENGINE\fR]
75 [\fB\-pubin\fR]
76 [\fB\-certin\fR]
77 [\fB\-sign\fR]
78 [\fB\-verify\fR]
79 [\fB\-encrypt\fR]
80 [\fB\-decrypt\fR]
81 [\fB\-pkcs\fR]
82 [\fB\-x931\fR]
83 [\fB\-oaep\fR]
84 [\fB\-raw\fR]
85 [\fB\-hexdump\fR]
86 [\fB\-asn1parse\fR]
87 [\fB\-engine\fR \fIid\fR]
88 [\fB\-rand\fR \fIfiles\fR]
89 [\fB\-writerand\fR \fIfile\fR]
90 [\fB\-provider\fR \fIname\fR]
91 [\fB\-provider\-path\fR \fIpath\fR]
92 [\fB\-provparam\fR \fI[name:]key=value\fR]
93 [\fB\-propquery\fR \fIpropq\fR]
97 The \fBopenssl\-pkeyutl\fR\|(1) command should be used instead.
100 data using the RSA algorithm.
103 .IP \fB\-help\fR 4
104 .IX Item "-help"
106 .IP "\fB\-in\fR \fIfilename\fR" 4
107 .IX Item "-in filename"
108 This specifies the input filename to read data from or standard input
110 .IP "\fB\-passin\fR \fIarg\fR" 4
111 .IX Item "-passin arg"
113 See see \fBopenssl\-passphrase\-options\fR\|(1).
114 .IP \fB\-rev\fR 4
115 .IX Item "-rev"
117 .IP "\fB\-out\fR \fIfilename\fR" 4
118 .IX Item "-out filename"
121 .IP "\fB\-inkey\fR \fIfilename\fR|\fIuri\fR" 4
122 .IX Item "-inkey filename|uri"
124 .IP "\fB\-keyform\fR \fBDER\fR|\fBPEM\fR|\fBP12\fR|\fBENGINE\fR" 4
125 .IX Item "-keyform DER|PEM|P12|ENGINE"
127 See \fBopenssl\-format\-options\fR\|(1) for details.
128 .IP \fB\-pubin\fR 4
129 .IX Item "-pubin"
133 .IP \fB\-certin\fR 4
134 .IX Item "-certin"
136 .IP \fB\-sign\fR 4
137 .IX Item "-sign"
138 Sign the input data and output the signed result. This requires
140 .IP \fB\-verify\fR 4
141 .IX Item "-verify"
142 Verify the input data and output the recovered data.
143 .IP \fB\-encrypt\fR 4
144 .IX Item "-encrypt"
145 Encrypt the input data using an RSA public key.
146 .IP \fB\-decrypt\fR 4
147 .IX Item "-decrypt"
148 Decrypt the input data using an RSA private key.
149 .IP "\fB\-pkcs\fR, \fB\-oaep\fR, \fB\-x931\fR, \fB\-raw\fR" 4
150 .IX Item "-pkcs, -oaep, -x931, -raw"
153 For signatures, only \fB\-pkcs\fR and \fB\-raw\fR can be used.
157 Use \fB\-raw\fR and inspect the returned value manually to check if the
159 .IP \fB\-hexdump\fR 4
160 .IX Item "-hexdump"
161 Hex dump the output data.
162 .IP \fB\-asn1parse\fR 4
163 .IX Item "-asn1parse"
164 Parse the ASN.1 output data, this is useful when combined with the
165 \&\fB\-verify\fR option.
166 .IP "\fB\-engine\fR \fIid\fR" 4
167 .IX Item "-engine id"
170 .IP "\fB\-rand\fR \fIfiles\fR, \fB\-writerand\fR \fIfile\fR" 4
171 .IX Item "-rand files, -writerand file"
173 .IP "\fB\-provider\fR \fIname\fR" 4
174 .IX Item "-provider name"
176 .IP "\fB\-provider\-path\fR \fIpath\fR" 4
177 .IX Item "-provider-path path"
178 .IP "\fB\-provparam\fR \fI[name:]key=value\fR" 4
179 .IX Item "-provparam [name:]key=value"
180 .IP "\fB\-propquery\fR \fIpropq\fR" 4
181 .IX Item "-propquery propq"
187 used to sign or verify small pieces of data.
191 non-deprecated \fBopenssl\-pkeyutl\fR\|(1) command.
193 Sign some data using a private key:
196 \& openssl rsautl \-sign \-in file \-inkey key.pem \-out sig
199 Recover the signed data
202 \& openssl rsautl \-verify \-in sig \-inkey key.pem
205 Examine the raw signed data:
208 \& openssl rsautl \-verify \-in sig \-inkey key.pem \-raw \-hexdump
210 \& 0000 \- 00 01 ff ff ff ff ff ff\-ff ff ff ff ff ff ff ff ................
211 \& 0010 \- ff ff ff ff ff ff ff ff\-ff ff ff ff ff ff ff ff ................
212 \& 0020 \- ff ff ff ff ff ff ff ff\-ff ff ff ff ff ff ff ff ................
213 \& 0030 \- ff ff ff ff ff ff ff ff\-ff ff ff ff ff ff ff ff ................
214 \& 0040 \- ff ff ff ff ff ff ff ff\-ff ff ff ff ff ff ff ff ................
215 \& 0050 \- ff ff ff ff ff ff ff ff\-ff ff ff ff ff ff ff ff ................
216 \& 0060 \- ff ff ff ff ff ff ff ff\-ff ff ff ff ff ff ff ff ................
217 \& 0070 \- ff ff ff ff 00 68 65 6c\-6c 6f 20 77 6f 72 6c 64 .....hello world
222 and random padding data visible instead of the 0xff bytes.
225 command in conjunction with \fBopenssl\-asn1parse\fR\|(1). Consider the self signed
226 example in \fIcerts/pca\-cert.pem\fR. Running \fBopenssl\-asn1parse\fR\|(1) as follows
230 \& openssl asn1parse \-in pca\-cert.pem
232 \& 0:d=0 hl=4 l= 742 cons: SEQUENCE
233 \& 4:d=1 hl=4 l= 591 cons: SEQUENCE
242 \& 35:d=4 hl=2 l= 9 cons: SEQUENCE
255 \& openssl asn1parse \-in pca\-cert.pem \-out sig \-noout \-strparse 614
261 \& openssl x509 \-in test/testx509.pem \-pubkey \-noout >pubkey.pem
267 \& openssl rsautl \-in sig \-verify \-asn1parse \-inkey pubkey.pem \-pubin
271 \& 4:d=2 hl=2 l= 8 prim: OBJECT :md5
274 \& 0000 \- f3 46 9e aa 1a 4a 73 c9\-37 ea 93 00 48 25 08 b5 .F...Js.7...H%..
282 \& openssl asn1parse \-in pca\-cert.pem \-out tbs \-noout \-strparse 4
288 \& openssl md5 \-c tbs
289 \& MD5(tbs)= f3:46:9e:aa:1a:4a:73:c9:37:ea:93:00:48:25:08:b5
296 \&\fBopenssl\-pkeyutl\fR\|(1),
297 \&\fBopenssl\-dgst\fR\|(1),
298 \&\fBopenssl\-rsa\fR\|(1),
299 \&\fBopenssl\-genrsa\fR\|(1)
304 The \fB\-engine\fR option was deprecated in OpenSSL 3.0.
307 Copyright 2000\-2023 The OpenSSL Project Authors. All Rights Reserved.