diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2015-05-21 14:17:32 +0100 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2015-05-26 13:09:26 +0100 |
| commit | 0ceb8b74f50066a4bfa55227bc741e3259f7df43 (patch) | |
| tree | ddee92cc45d065b8584111523f470f7a173c5bdb /doc | |
| parent | 6355d31538fb3d50ba34210e6514cfac1c627243 (diff) | |
scrypt in pkcs8 util
Add support for PKCS#8 private key encryption using the scrypt algorithm
in the pkcs8 utility. Update documentation.
Reviewed-by: Rich Salz <rsalz@openssl.org>
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/apps/pkcs8.pod | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/doc/apps/pkcs8.pod b/doc/apps/pkcs8.pod index e946cbdfaf..44c27f17f6 100644 --- a/doc/apps/pkcs8.pod +++ b/doc/apps/pkcs8.pod @@ -24,6 +24,10 @@ B<openssl> B<pkcs8> [B<-v2prf alg>] [B<-v1 alg>] [B<-engine id>] +[B<-scrypt>] +[B<-scrypt_N N>] +[B<-scrypt_r r>] +[B<-scrypt_p p>] =head1 DESCRIPTION @@ -144,6 +148,17 @@ to attempt to obtain a functional reference to the specified engine, thus initialising it if needed. The engine will then be set as the default for all available algorithms. +=item B<-scrypt> + +uses the B<scrypt> algorithm for private key encryption using default +parameters: currently N=1024, r=8 and p=16 and AES in CBC mode with a 256 bit +key. These parameters can be modified using the B<-scrypt_N>, B<-scrypt_r>, +B<-scrypt_p> and B<-v2> options. + +B<-scrypt_N N> B<-scrypt_r r> B<-scrypt_p p> + +sets the scrypt B<N>, B<r> or B<p> parameters. + =back =head1 NOTES |