private keys without authenticated encryption

Andreas Schiermeier <[email protected]> Sat, 15 Dec 2012 01:57:03 +0100
Newsgroups gmane.comp.encryption.cryptlib
Message-ID <[email protected]>
Hello,

is it possible to generate private key files without the RFC 5083
authenticated encryption?

I try to generate a RSA keyfile using python based on cryptlib 3.4.1:

python <<'EOF'
from cryptlib_py import *
cryptInit();
cryptContext = cryptCreateContext(CRYPT_UNUSED, CRYPT_ALGO_RSA);
cryptSetAttributeString(cryptContext, CRYPT_CTXINFO_LABEL, "SSH_KEY");
cryptSetAttribute(cryptContext, CRYPT_CTXINFO_KEYSIZE, 2048/8);
cryptGenerateKey(cryptContext);
cryptKeyset = cryptKeysetOpen( CRYPT_UNUSED, CRYPT_KEYSET_FILE,
"wftp_default_ssh.key", CRYPT_KEYOPT_CREATE );
cryptSetAttribute(cryptKeyset, CRYPT_ENVINFO_INTEGRITY,
CRYPT_INTEGRITY_NONE);
cryptAddPrivateKey( cryptKeyset, cryptContext, "password" );
cryptKeysetClose( cryptKeyset );
cryptDestroyContext( cryptContext );
EOF

When I load this key file into a statically linked (against cryptlib <
3.4), closed source software <http://www.wftpserver.com/> for it's SSH
server functionality, the file is rejected.

As stated in the cryptlib README I can read the pre-built key file (~40
byte smaller in size) shipped with wftp using python and cryptlib 3.4.1.

(How) can I *generate* a backward compatible key file?

Kind regards,
  Andreas

_______________________________________________
Cryptlib mailing list
[email protected] via Mail: [email protected]
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.