netbsd man page for plainrsa-gen

PLAINRSA-GEN(8) 					    BSD System Manager's Manual 					   PLAINRSA-GEN(8)

NAME
     plainrsa-gen -- generator for Plain RSA keys

SYNOPSIS
     plainrsa-gen [-b bits] [-e pubexp] [-f outfile] [-h]

DESCRIPTION
     plainrsa-gen can be used to generate Plain RSA keys for authentication purposes.  Using Plain RSA keys is optional.  Other possibilities are
     Pre-shared keys or X.509 certificates.

     -b bits
	     bit length of the key.  Default is 1024, recommended length is 2048 or even 4096 bits.  Note that generating longer keys takes longer
	     time.

     -e pubexp
	     value of RSA public exponent.  Default is 0x3.  Don't change this unless you really know what you are doing!

     -f outfile
	     outfile instead of stdout.  If the file already exists it won't be overwritten.  You wouldn't like to lose your private key by acci-
	     dent, would you?

OUTPUT FILE FORMAT
     This is the secret private key that should never leave your computer:

     : RSA   {
	     # RSA 1024 bits
	     # pubkey=0sAQOrWlcwbAIdNSMhDt...
	     Modulus: 0xab5a57306c021d3523...
	     PublicExponent: 0x03
	     PrivateExponent: 0x723c3a2048...
	     Prime1: 0xd309b30e6adf9d85c01...
	     Prime2: 0xcfdc2a8aa5b2b3c90e3...
	     Exponent1: 0x8cb122099c9513ae...
	     Exponent2: 0x8a92c7071921cd30...
	     Coefficient: 0x722751305eafe9...
       }

     The line pubkey=0sAQOrW... of the private key contains a public key that should be stored in the other peer's configuration in this format:

     : PUB 0sAQOrWlcwbAIdNSMhDt...

     You can also specify from and to addresses for which the key is valid:

     0.0.0.0/0 10.20.30.0/24 : PUB 0sAQOrWlcwbAIdNSMhDt...

SEE ALSO
     racoon.conf(5), racoon(8)

HISTORY
     plainrsa-gen was written by Michal Ludvig <michal@logix.cz> and first appeared in ipsec-tools 0.4.

BSD
								   June 14, 2004							       BSD