Questions tagged [pkcs8]
PKCS #8 defines a standard syntax for storing private key information. PKCS #8 is one of the family of standards called Public-Key Cryptography Standards (PKCS) published by RSA Laboratories.
13
questions
0
votes
0
answers
85
views
OpenSSL get PKCS#8 encrypted rsa PBKDF2 iteration count
I have a PCKS#8 RSA Key encrypted with a passphrase and would like to retrieve the iteration count used for the PBKDF2 used to derive the AES Key used for encryption, in order to make sure that they ...
- 143
19
votes
1
answer
5k
views
Why did OpenSSH create its own key format, and not use PKCS#8?
Before posting this question about ed25519, I learned that there are two formats for storing a private ed25519 key,
PKCS#8
OpenSSH Format
Why did OpenSSH create its own format rather than use PKCS#8?...
- 2,702
7
votes
3
answers
5k
views
How can I convert an ED25519 key in PKCS#8 to OpenSSH private key format?
I'm having a problem where when I export a key from 1password, and use it with ssh -i, I get
Load key "/home/user/.ssh/private_ed25519": invalid format
Doing a google search on this, it ...
- 2,702
0
votes
0
answers
133
views
Is it possible to check private key syntax using openssl?
I have a DER-serialized private key. The tool I have to provide the key to gives me algid parse error, not a sequence, and it looks like the problem is that the key is not PKCS#8.
The command that the ...
- 101
1
vote
0
answers
355
views
Specification of AES-based PKCS#5 Password-Based Encryption (PBE)
recently I had a look at the capabilities of the Java keytool to create PKCS#12 containers with a protected private key. According to the standard a private key is protected using a PKCS#8 shrouded ...
- 13
1
vote
1
answer
825
views
How to encode a public key in PKCS#8?
RFC5958 defines a set of enhancements to the PKCS#8 key serialization format, bumping the version field up to 1 and additionally permitting serialization of public keys for arbitrary asymmetric ...
2
votes
1
answer
3k
views
OpenSSL encrypt DER format private key
When converting a password-protected PEM/PKCS1-encoded private key to DER format one is not able to encrypt the key, OpenSSL automagically asks for the password and writes the plain-text key in the ...
- 131
1
vote
0
answers
187
views
Root CA key generation compliant with WebTrust and HSM independent
I'm trying to figure out how to generate private key for the Root CA according the principles of WebTrust.
One additional requirement I have that the generate private key should be then imported to ...
- 1,119
3
votes
6
answers
870
views
Good way to protect lots of private keys
I'm working on a software which deals with lots (several millions) of RSA private keys. Keysize is 2048, I'm going to store them in database in PEM format.
I want keys to be encrypted to mitigate ...
- 131
2
votes
1
answer
2k
views
What password based key derivation does PKCS #12 use?
I would like to make a note that I have read all of rfc 7292.
I am trying to decrypt encrypted private key in a pkcs#12 pfx file.
The private key is enveloped within pkcs#8 shrouded key bag.
The ...
- 21
4
votes
1
answer
18k
views
Extract the content of PKCS7 file in Java
I have a PKCS#7 signature that have the content‐type signed data and it embeds an XML document, and I have to extract the xml document from this PKCS7 file.
Anyone know how to do that in java ??
- 689
1
vote
1
answer
3k
views
What does the EC Private key version field mean?
I have read the question Converting ECC Private key to PKCS#1 format. And I understood that the value of the version field of the traditional EC private key is 01.
We can use the command openssl ...
- 11
19
votes
3
answers
30k
views
Converting ECC Private key to PKCS#1 format
Is there any way to convert an ECC private key to RSA PKCS#1 format?
I have tried converting it to PKCS#8 first using OpenSSL:
openssl pkcs8 -topk8 -nocrypt -in EC_key.pem -out pkcs8_key.pem
This ...
- 193