On 10/02/15 14:09, Sec_Aficionado wrote: > Ah, thank you! I tried a lot of things and was very frustrated. I wish the documentation reflected that. I'll see if I can contribute by updating it. It does: https://www.openssl.org/docs/apps/enc.html "The enc program does not support authenticated encryption modes like CCM and GCM. The utility does not store or retrieve the authentication tag." > > Regarding AES-GCM from the command line, or PHP bindings, is that something that any of the OpenSSL components support? I think EVP is the intended way but there are no PHP bindings, only C from what I can tell. No - you can't do AES-GCM from the command line (things like s_server and s_client support it - but that doesn't help you for what you want to do). We don't supply the PHP bindings - you'll have to talk to the PHP guys about that. Matt
