On Mon, Apr 6, 2020 at 10:03 PM William Roberts <bill.c.roberts@xxxxxxxxx> wrote: > > > > I don't think I would consider it a hack necessarily. I work on the TPM stack and have to convert TPM structures to RSA public key structures for ooenssl to utilize, and we use this routine along the way. I would imagine theirs a higher level public from private routine you can call. I would dissect what: > > openssl rsa -in mykey.pem -pubout > mykey.pub > > Is doing Thanks for the help. Turns out, d2i_PUBKEY() does exactly the thing. The advantage over picking BIGNUMs out of the SPKI bundle is that the code doesn't need to know the key size.