Lines Matching +full:no +full:- +full:gost

1 .\"	$NetBSD: openssl-dgst.1,v 1.1 2024/07/12 21:01:07 christos Exp $
3 .\" -*- mode: troff; coding: utf-8 -*-
59 .IX Title "OPENSSL-DGST 1"
60 .TH OPENSSL-DGST 1 2024-07-11 3.0.14 OpenSSL
66 openssl\-dgst \- perform digest operations
70 [\fB\-\fR\f(BIdigest\fR]
71 [\fB\-list\fR]
72 [\fB\-help\fR]
73 [\fB\-c\fR]
74 [\fB\-d\fR]
75 [\fB\-debug\fR]
76 [\fB\-hex\fR]
77 [\fB\-binary\fR]
78 [\fB\-xoflen\fR \fIlength\fR]
79 [\fB\-r\fR]
80 [\fB\-out\fR \fIfilename\fR]
81 [\fB\-sign\fR \fIfilename\fR|\fIuri\fR]
82 [\fB\-keyform\fR \fBDER\fR|\fBPEM\fR|\fBP12\fR|\fBENGINE\fR]
83 [\fB\-passin\fR \fIarg\fR]
84 [\fB\-verify\fR \fIfilename\fR]
85 [\fB\-prverify\fR \fIfilename\fR]
86 [\fB\-signature\fR \fIfilename\fR]
87 [\fB\-sigopt\fR \fInm\fR:\fIv\fR]
88 [\fB\-hmac\fR \fIkey\fR]
89 [\fB\-mac\fR \fIalg\fR]
90 [\fB\-macopt\fR \fInm\fR:\fIv\fR]
91 [\fB\-fips\-fingerprint\fR]
92 [\fB\-engine\fR \fIid\fR]
93 [\fB\-engine_impl\fR \fIid\fR]
94 [\fB\-rand\fR \fIfiles\fR]
95 [\fB\-writerand\fR \fIfile\fR]
96 [\fB\-provider\fR \fIname\fR]
97 [\fB\-provider\-path\fR \fIpath\fR]
98 [\fB\-propquery\fR \fIpropq\fR]
109 A supported \fIdigest\fR name may also be used as the sub-command name.
110 To see the list of supported algorithms, use \f(CW\*(C`openssl list \-digest\-algorithms\*(C'\fR
113 .IP \fB\-help\fR 4
114 .IX Item "-help"
116 .IP \fB\-\fR\f(BIdigest\fR 4
117 .IX Item "-digest"
118 Specifies name of a supported digest to be used. See option \fB\-list\fR below :
119 .IP \fB\-list\fR 4
120 .IX Item "-list"
122 .IP \fB\-c\fR 4
123 .IX Item "-c"
125 the \fB\-hex\fR option is given as well.
126 .IP "\fB\-d\fR, \fB\-debug\fR" 4
127 .IX Item "-d, -debug"
129 .IP \fB\-hex\fR 4
130 .IX Item "-hex"
133 signatures using \fB\-hex\fR.
134 .IP \fB\-binary\fR 4
135 .IX Item "-binary"
137 .IP "\fB\-xoflen\fR \fIlength\fR" 4
138 .IX Item "-xoflen length"
153 .IP \fB\-r\fR 4
154 .IX Item "-r"
157 .IP "\fB\-out\fR \fIfilename\fR" 4
158 .IX Item "-out filename"
160 .IP "\fB\-sign\fR \fIfilename\fR|\fIuri\fR" 4
161 .IX Item "-sign filename|uri"
163 does not support Ed25519 or Ed448 private keys. Use the \fBopenssl\-pkeyutl\fR\|(1)
165 .IP "\fB\-keyform\fR \fBDER\fR|\fBPEM\fR|\fBP12\fR|\fBENGINE\fR" 4
166 .IX Item "-keyform DER|PEM|P12|ENGINE"
168 See \fBopenssl\-format\-options\fR\|(1) for details.
169 .IP "\fB\-sigopt\fR \fInm\fR:\fIv\fR" 4
170 .IX Item "-sigopt nm:v"
172 Names and values of these options are algorithm-specific.
173 .IP "\fB\-passin\fR \fIarg\fR" 4
174 .IX Item "-passin arg"
176 see \fBopenssl\-passphrase\-options\fR\|(1).
177 .IP "\fB\-verify\fR \fIfilename\fR" 4
178 .IX Item "-verify filename"
181 .IP "\fB\-prverify\fR \fIfilename\fR" 4
182 .IX Item "-prverify filename"
184 .IP "\fB\-signature\fR \fIfilename\fR" 4
185 .IX Item "-signature filename"
187 .IP "\fB\-hmac\fR \fIkey\fR" 4
188 .IX Item "-hmac key"
191 The \fBopenssl\-mac\fR\|(1) command should be preferred to using this command line
193 .IP "\fB\-mac\fR \fIalg\fR" 4
194 .IX Item "-mac alg"
196 algorithm is HMAC (hash-based MAC), but there are other MAC algorithms
197 which are not based on hash, for instance \fBgost-mac\fR algorithm,
198 supported by the \fBgost\fR engine. MAC keys and other options should be set
199 via \fB\-macopt\fR parameter.
201 The \fBopenssl\-mac\fR\|(1) command should be preferred to using this command line
203 .IP "\fB\-macopt\fR \fInm\fR:\fIv\fR" 4
204 .IX Item "-macopt nm:v"
205 Passes options to MAC algorithm, specified by \fB\-mac\fR key.
206 Following options are supported by both by \fBHMAC\fR and \fBgost-mac\fR:
212 the MAC algorithm for example exactly 32 chars for gost-mac.
217 for example exactly 32 chars for gost-mac.
221 The \fBopenssl\-mac\fR\|(1) command should be preferred to using this command line
224 .IP \fB\-fips\-fingerprint\fR 4
225 .IX Item "-fips-fingerprint"
226 Compute HMAC using a specific key for certain OpenSSL-FIPS operations.
227 .IP "\fB\-rand\fR \fIfiles\fR, \fB\-writerand\fR \fIfile\fR" 4
228 .IX Item "-rand files, -writerand file"
230 .IP "\fB\-engine\fR \fIid\fR" 4
231 .IX Item "-engine id"
235 The engine is not used for digests unless the \fB\-engine_impl\fR option is
237 .IP "\fB\-engine_impl\fR \fIid\fR" 4
238 .IX Item "-engine_impl id"
239 When used with the \fB\-engine\fR option, it specifies to also use
241 .IP "\fB\-provider\fR \fIname\fR" 4
242 .IX Item "-provider name"
244 .IP "\fB\-provider\-path\fR \fIpath\fR" 4
245 .IX Item "-provider-path path"
246 .IP "\fB\-propquery\fR \fIpropq\fR" 4
247 .IX Item "-propquery propq"
252 File or files to digest. If no files are specified then standard input is
256 To create a hex-encoded message digest of a file:
259 \& openssl dgst \-md5 \-hex file.txt
264 To sign a file using SHA\-256 with binary file output:
267 \& openssl dgst \-sha256 \-sign privatekey.pem \-out signature.sign file.txt
269 \& openssl sha256 \-sign privatekey.pem \-out signature.sign file.txt
275 \& openssl dgst \-sha256 \-verify publickey.pem \e
276 \& \-signature signature.sign \e
283 The \f(CW\*(C`openssl list \-digest\-algorithms\*(C'\fR command can be used to list them.
285 New or agile applications should use probably use SHA\-256. Other digests,
286 particularly SHA\-1 and MD5, are still widely used for interoperating
301 Hex signatures cannot be verified using \fBopenssl\fR.  Instead, use "xxd \-r"
305 The \fBopenssl\-mac\fR\|(1) command is preferred over the \fB\-hmac\fR, \fB\-mac\fR and
306 \&\fB\-macopt\fR command line options.
309 \&\fBopenssl\-mac\fR\|(1)
313 The FIPS-related options were removed in OpenSSL 1.1.0.
315 The \fB\-engine\fR and \fB\-engine_impl\fR options were deprecated in OpenSSL 3.0.
318 Copyright 2000\-2022 The OpenSSL Project Authors. All Rights Reserved.