Hello Steve, first of all thanks for helpful advice. When printing out all the fields of the message with the openssl command I got for every recipient two blocks. One block includes the OAEP padding and the other block (same recipient) includes the default padding. d.ktri: version: <ABSENT> d.issuerAndSerialNumber: issuer: C=DE, O=extern, OU=host3, CN=CA - host3 serialNumber: 12302977334217659119 keyEncryptionAlgorithm: algorithm: rsaEncryption (1.2.840.113549.1.1.1) parameter: NULL d.ktri: version: <ABSENT> d.issuerAndSerialNumber: issuer: C=DE, O=extern, OU=host3, CN=CA - host3 serialNumber: 12302977334217659119 keyEncryptionAlgorithm: algorithm: rsaesOaep (1.2.840.113549.1.1.7) parameter: SEQUENCE: 0:d=0 hl=2 l= 43 cons: SEQUENCE 2:d=1 hl=2 l= 13 cons: cont [ 0 ] 4:d=2 hl=2 l= 11 cons: SEQUENCE 6:d=3 hl=2 l= 9 prim: OBJECT :sha256 17:d=1 hl=2 l= 26 cons: cont [ 1 ] 19:d=2 hl=2 l= 24 cons: SEQUENCE 21:d=3 hl=2 l= 9 prim: OBJECT :mgf1 32:d=3 hl=2 l= 11 cons: SEQUENCE 34:d=4 hl=2 l= 9 prim: OBJECT :sha256 How can I make sure that only the OAEP padding is used? Regards Rudy -- View this message in context: http://openssl.6102.n7.nabble.com/RSA-PKCS1-OAEP-PADDING-tp70741p70789.html Sent from the OpenSSL - User mailing list archive at Nabble.com. -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users