encryption - OpenSSL Authenticated Encryption

Question

I'm trying to use OpenSSL for authenticated encryption. Specifically, I'm trying to use AES-256-GCM (or CCM).

However, when I run openssl list-cipher-commands, I don't see it. The only AES ciphers shown are these:

aes-128-cbc
aes-128-ecb
aes-192-cbc
aes-192-ecb
aes-256-cbc
aes-256-ecb

I'm on openssl 1.0.1e, so it should be supported.

Answer 1

OpenSSL 支持aes-256-gcm作为算法，但不支持aes-256-gcm作为命令工具。不同之处在于您可以openssl aes-256-cbc在命令行中输入来加密某些内容。另一方面，没有这样的openssl aes-256-gcm命令行工具。

如this answer所示，您可以使用该EVP接口调用aes-256-gcm算法。

顺便说一句，您可以尝试openssl enc aes-256-gcm在命令行中使用。这也不起作用，因为 noadditional authenticated data将由enc命令处理。在此处查看更多信息。