On 28/04/17 08:07, Josh Shamir wrote: > Dear all, > > I am trying DH key derivation by using OpenSSL commands. However, I got > the following problem: > > "140343063295640:error:0609B099:digital envelope > routines:EVP_PKEY_derive_set_peer:different parameters:pmeth_fn.c:314: > Public Key operation error > 140343063295640:error:0507006C:Diffie-Hellman > routines:PKEY_DH_DERIVE:keys not set:dh_pmeth.c:436:" ... > $ openssl pkeyutl -derive -inkey dhkeyD.pem -peerkey dhpubm.pem -out > segreto1.bin What are the parameters used for dhpubm.pem? The parameters used for that and for dhkeyD.pem must be the same - but you have generated a completely new set of parameters in the steps above. Get hold of the parameters for dhpubm.pem and regenerate a fresh DH key based on those params. You should then be able to derive. Matt -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users