Name

genrsa

Synopsis

The genrsa command is used for generating RSA keys.

Options

-out filename

Specify the name of the file to write the generated key to. If this option is omitted, the key will be written to stdout.

-rand filename

Specify the name of a file or files to use to seed the PRNG. The parameter for this option follows the guidelines outlined in Chapter 2.

-passout password

Specify the password or passphrase to use to encrypt the generated key. The parameter for this option follows the guidelines for passwords and passphrases outlined in Chapter 2.

-des, -des3, -idea

Specify the cipher to use to encrypt the generated key. If none of these options is specified, the key will not be encrypted.

-F4, -3

Specify the public exponent to be used by the generated key. If F4 is specified, 65537 will be used; otherwise, 3 will be used. If neither of these options is specified, the default is 65537.

Notes

The length of the key to generate is specified as the last argument on the command line. If no length is specified, a default length of 512 bits will be used.