Is there a way to pass the OAEP label to OpenSSL command-line tools?

For a specific example, consider this command for RSA OAEP encryption that does not specify the label:

openssl rsautl -encrypt -oaep -inkey path_to_key.pem


Based on the source it does not appear that such an option exists for rsautl. After some digging however, I discovered that pkeyutl supports the rsa_oaep_label option as a hex string:

openssl pkeyutl -encrypt -inkey path_to_key.pem -pkeyopt rsa_padding_mode:oaep -pkeyopt rsa_oaep_label:[hex string]
| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.