Pantek Library
Hosting Provided By
CybrHost
High Speed Hosting

Re: [Design] RSA keys

From: Andreas Steffen <andreas.steffen(at)strongsec.net>
Date: Tue Mar 18 2003 - 08:52:22 EST

OpenSSL uses the PKCS#1 private key format which contains the same elements as the FreeS/WAN private key format with the difference that the encoding is in binary DER format based on the following ASN.1 object definition:

RSAPrivateKey ::= SEQUENCE {

    version          INTEGER { rsaPrivateKeyVer0(0) }(rsaPrivateKeyVer0),
    modulus          INTEGER, -- (Usually large) n
    publicExponent   INTEGER, -- (Usually small) e
    privateExponent  INTEGER, -- (Usually large) d
    prime1           INTEGER, -- (Usually large) p
    prime2           INTEGER, -- (Usually large) q
    exponent1        INTEGER, -- (Usually large) d mod (p-1)
    exponent2        INTEGER, -- (Usually large) d mod (q-1)
    coefficient      INTEGER  -- (Usually large) (inverse of q) mod p
}

To my knowledge nobody has written a tool yet that does the conversion from FreeS/WAN ASCII format into binary DER format.

Such a tool could easily built using either the OpenSSL library or some ASN.1 Perl modules. Unfortunately I haven't found the time yet to do it.

Regards

Andreas

Roberto Barcellona wrote:
> I have to convert the public/private RSA keys format of FreeS/WAN in the RSA

-- 
=======================================================================
Andreas Steffen                   e-mail: andreas.steffen@strongsec.com
strongSec GmbH                    home:   
http://www.strongsec.com
Alter Zürichweg 20                phone:  +41 1 730 80 64
CH-8952 Schlieren (Switzerland)   fax:    +41 1 730 80 65
==========================================[strong internet security]===


Content Security by MailMarshal
_______________________________________________
Design mailing list
Design@lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/design
Received on Tue Mar 18 09:53:25 2003
Do you need help?X

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 12:59:57 EDT


Contact Us  Legal Notices  Order Services Online 
Pantek Home  Privacy Policy  IT news  Site Map  Pantek Library