Home » Smartcard quickstarter guide

Signing, crypting and verifying

Prepare testing environment

p15temp=/home/some_directory
m=$p15temp/message
h=$p15temp/hashed
s=$p15temp/signed
e=$p15temp/encrypted
d=$p15temp/decrypted
k=$p15temp/puk.rsa.1024.pem
echo "Generate keypair"
pkcs15-init -vvvvvvvvv -G rsa/1024 -i 45 -a 01 -u sign,decrypt --pin 1234
pkcs15-tool --read-public-key 45 -o $k
echo sometext > $m

Signing and verifying using MD5

openssl dgst -md5 -binary -out $h < $m
pkcs15-crypt -vvvvvvvvv -s --md5 --pkcs1 -i $h -o $s
openssl dgst -verify $k -md5 -signature $s < $m

Encrypting message (pkcs1 padding)

openssl rsautl -pubin -inkey $k -encrypt -in $m -out $e
pkcs15-crypt -vvvvvvvvv -c --pkcs1 -i $e -o $d

Bookmark/Search this post with