in reply to Re: RSA encrypt but no decrypt. What is the problem? (updated)
in thread RSA encrypt but no decrypt. What is the problem?

Yes, thanks, I have checked, your code works for me, but it is not convenient for me. In your code, encryption and decryption is done within a single script. In practice, this is not convenient. I would like one script to encrypt the message and another script to decrypt the message. In this case, it is not possible to use Crypt :: OpenSSL :: RSA-> generate_key (1024); in both scripts. The best option is to use the parameters n, e, and d.

  • Comment on Re^2: RSA encrypt but no decrypt. What is the problem? (updated)

Replies are listed 'Best First'.
Re^3: RSA encrypt but no decrypt. What is the problem?
by haukex (Archbishop) on May 08, 2021 at 17:54 UTC
    The best option is to use the parameters n, e, and d.

    Personally, I'd use the string representation of the keys, since that's also a standard way of sharing them, but you're free to use the parameters if you wish. My code shows examples of both.

[reply]

      Two questions:

      1. Does your method mean that in Perl for RSA I must use the generate_key() function to generate keys? Can I do without this function in Perl and set the parameters n, e, d myself? For example, in the C-language, this is possible.

      2. I tried adding one line to your code:

      my $plaintext = $rsa2->public_decrypt($ciphertext);

      but unfortunately this script gives an error: "unknown padding type". Of course, the error can be avoided by adding one more line:

      $rsa2->use_no_padding();

      But as a result, the decryption of the text will not be correct. Do you think why?

[reply]
[d/l]
[select]
        Can I do without this function in Perl and set the parameters n, e, d myself?

        Yes, my code outputs these parameters and like I said, when I used them in your code, it worked, meaning the values of your parameters appear to be incorrect, but otherwise initializing the keys like you did basically works.

        Does your method mean that in Perl for RSA I must use the generate_key() function to generate keys?

        No, there are plenty of other ways to generate RSA keys. Though I can't test right now to confirm, you should be able to generate an RSA key with openssl-genrsa and get its paramaters with openssl-rsa's -text option*. But again, the PEM representation of keys (-----BEGIN RSA PRIVATE KEY----- and so on) would be my choice.

        I tried adding one line to your code: my $plaintext = $rsa2->public_decrypt($ciphertext); but unfortunately this script gives an error

        That a message enrypted with a public key needs to be decrypted with the matching private key is a pretty essential fact of Public-key cryptography, so you probably want to read up on that. Perhaps you're thinking of Symmetric-key algorithms instead? RSA is not one of those. Maybe have a look at e.g. Crypt::Cipher::AES?

        Minor edit for clarification in first paragraph.

        * Update 2: Confirmed: openssl genrsa 512 | openssl rsa -text -noout gives the following values: modulus=n, publicExponent=e, privateExponent=d, prime1=p, prime2=q. Of course you probably want to use more than 512 bits, but I just did that to be in line with your example in the root node.

[reply]
[d/l]
[select]

In Section Seekers of Perl Wisdom