Re: Problem with DH key derivation

[Josh Shamir <josh.shamir@xxxxxxxxx>]

Thank you very much Matt!

You solved my problem.

Best regards,

Josh

On Fri, Apr 28, 2017 at 11:04 AM, Matt Caswell <matt@xxxxxxxxxxx> wrote:

On 28/04/17 08:07, Josh Shamir wrote:
> Dear all,
>
> I am trying DH key derivation by using OpenSSL commands. However, I got
> the following problem:
>
> "140343063295640:error:0609B099:digital envelope
> routines:EVP_PKEY_derive_set_peer:different parameters:pmeth_fn.c:314:
> Public Key operation error
> 140343063295640:error:0507006C:Diffie-Hellman
> routines:PKEY_DH_DERIVE:keys not set:dh_pmeth.c:436:"

...

> $ openssl pkeyutl -derive -inkey dhkeyD.pem -peerkey dhpubm.pem -out
> segreto1.bin

What are the parameters used for dhpubm.pem? The parameters used for
that and for dhkeyD.pem must be the same - but you have generated a
completely new set of parameters in the steps above.

Get hold of the parameters for dhpubm.pem and regenerate a fresh DH key
based on those params. You should then be able to derive.

Matt
--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users