decrypt.rb

David Salisbury david.salisbury at momentumweb.com
Thu Apr 11 17:44:08 EEST 2019


On 4/11/2019 1:50 AM, Aki Tuomi wrote:
>
>> ...
>> So, not being an expert at encryption, what are the ramifications of
>> those digests being read as different values in the two different
>> places??   I do notice that the get_pubid_priv() function is internal to
>> the decrypt.rb script and calls several OpenSSL functions.
>>
>> -Dave
> Hmm... can you show me how you made the keypair for encryption? Maybe there is some difference?
>
> Aki
>

Aki, I just used the "EC key" instructions from the Dovecot MailCrypt wiki:
https://wiki.dovecot.org/Plugins/MailCrypt

"
In order to generate an EC key, you must first choose a curve from the 
output of this command:
 > openssl ecparam -list_curves

If you choose the curve prime256v1, generate and EC key with the command:
 > openssl ecparam -name prime256v1 -genkey | openssl pkey -out 
ecprivkey.pem

Then generate a public key out of your private EC key
 > openssl pkey -in ecprivkey.pem -pubout -out ecpubkey.pem
"

-Dave



More information about the dovecot mailing list