本文共 1874 字，大约阅读时间需要 6 分钟。

OpenSSL????

OpenSSL??

OpenSSL???????????????????SSL/TLS??????????????????????DES?3DES?AES?????????????????????

OpenSSL?????

??????

1. DES?Data Encryption Standard?

• DES????????????????48??????????64??
• 3DES??DES????????????????

2. AES?Advanced Encryption Standard?

• AES?????????????????????128?192?256??
• AES??????????????????????

3. RSA?Rivest-Shamir-Adleman?

• RSA?????????????????????
• RSA???????
  • ???c = (m^e) mod n
  • ???m = c^d mod n???d??????

4. MD5?SHA??

• MD5????????128?????
• SHA-1?256????
• SHA-224?224????
• SHA-256?256????
• SHA-384?384????
• SHA-512?512????

5. Diffie-Hellman????

• Diffie-Hellman?????????????????SSL/TLS?????????
• ????????????DH??????

  openssl dhparam -o out/dhparam.pem -pbits 2048

OpenSSL????

1. ?????????

openssl genrsa -out private.key -bits 2048openssl rsa -in private.key -pubout -out public.key

2. ??????

openssl req -key private.key -out certificate.req

3. ?????

# ??openssl x509 -req -sha256 -in certificate.req -out signed_cert.pem -sign private.key# ??openssl x509 -verify -signature file

??????

1. ??MD5??????

# ??MD5??md5sum file# ??MD5?????hex???openssl dgst -md5 file

2. ??????

# ??????openssl rand -hex 10# ??Base64????????openssl rand -base64 10

3. ??SSL Rand????

# ??SSL???openssl rand -entropy 16

????

• ??????????????????????
• ??????????????????????????????
• ??????????????????????DHE????????

?????????????OpenSSL??????????????????????????????????OpenSSL?????????????