.\" -*- mode: troff; coding: utf-8 -*- .\" Automatically generated by Pod::Man v6.0.2 (Pod::Simple 3.45) .\" .\" Standard preamble: .\" ======================================================================== .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Vb \" Begin verbatim text .ft CW .nf .ne \\$1 .. .de Ve \" End verbatim text .ft R .fi .. .\" \*(C` and \*(C' are quotes in nroff, nothing in troff, for use with C<>. .ie n \{\ . ds C` "" . ds C' "" 'br\} .el\{\ . ds C` . ds C' 'br\} .\" .\" Escape single quotes in literal strings from groff's Unicode transform. .ie \n(.g .ds Aq \(aq .el .ds Aq ' .\" .\" If the F register is >0, we'll generate index entries on stderr for .\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index .\" entries marked with X<> in POD. Of course, you'll have to process the .\" output yourself in some meaningful fashion. .\" .\" Avoid warning from groff about undefined register 'F'. .de IX .. .nr rF 0 .if \n(.g .if rF .nr rF 1 .if (\n(rF:(\n(.g==0)) \{\ . if \nF \{\ . de IX . tm Index:\\$1\t\\n%\t"\\$2" .. . if !\nF==2 \{\ . nr % 0 . nr F 2 . \} . \} .\} .rr rF .\" .\" Required to disable full justification in groff 1.23.0. .if n .ds AD l .\" ======================================================================== .\" .IX Title "Crypt::PK::DSA 3" .TH Crypt::PK::DSA 3 2026-08-10 "perl v5.42.2" "User Contributed Perl Documentation" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l .nh .SH NAME Crypt::PK::DSA \- Public key cryptography based on DSA .SH SYNOPSIS .IX Header "SYNOPSIS" .Vb 1 \& ### OO interface \& \& my $message = \*(Aqhello world\*(Aq; \& my $signer = Crypt::PK::DSA\->new(); \& $signer\->generate_key(30, 256); \& \& my $signature = $signer\->sign_message($message, \*(AqSHA256\*(Aq); \& my $public_der = $signer\->export_key_der(\*(Aqpublic\*(Aq); \& my $verifier = Crypt::PK::DSA\->new(\e$public_der); \& $verifier\->verify_message($signature, $message, \*(AqSHA256\*(Aq) or die "ERROR"; \& \& my $ciphertext = $verifier\->encrypt("secret message"); \& my $plaintext = $signer\->decrypt($ciphertext); \& \& my $private_der = $signer\->export_key_der(\*(Aqprivate\*(Aq); \& my $private_pem = $signer\->export_key_pem(\*(Aqprivate\*(Aq); \& my $public_pem = $verifier\->export_key_pem(\*(Aqpublic\*(Aq); .Ve .SH DESCRIPTION .IX Header "DESCRIPTION" DSA is primarily a digital signature scheme. In this module, signing and verification are the most common operations and therefore the primary examples. .PP Legacy function\-style wrappers still exist in code for backwards compatibility, but they are intentionally undocumented. .SH METHODS .IX Header "METHODS" .SS new .IX Subsection "new" .Vb 2 \& my $source = Crypt::PK::DSA\->new(); \& $source\->generate_key(20, 128); \& \& my $public_der = $source\->export_key_der(\*(Aqpublic\*(Aq); \& my $pub = Crypt::PK::DSA\->new(\e$public_der); \& \& my $private_pem = $source\->export_key_pem(\*(Aqprivate\*(Aq, \*(Aqsecret\*(Aq, \*(AqAES\-256\-CBC\*(Aq); \& my $priv = Crypt::PK::DSA\->new(\e$private_pem, \*(Aqsecret\*(Aq); .Ve .PP Passing \f(CW$filename\fR or \f(CW\*(C`\e$buffer\*(C'\fR to \f(CW\*(C`new\*(C'\fR is equivalent: both forms immediately import the key material into the new object. .SS generate_key .IX Subsection "generate_key" Uses the bundled \f(CW\*(C`chacha20\*(C'\fR PRNG via libtomcrypt\*(Aqs \f(CW\*(C`rng_make_prng\*(C'\fR. Returns the object itself (for chaining). .PP .Vb 8 \& $pk\->generate_key($group_size, $modulus_size); \& # $group_size ... [integer] size of the subgroup (q) in bytes; must satisfy: 15 < $group_size < 1024 \& # $modulus_size .. [integer] size of the prime (p) in bytes; must satisfy: ($modulus_size \- $group_size) < 512 \& # $modulus_size must be >= $group_size \& # \& # The two\-integer form uses Perl\*(Aqs usual numeric\-to\-integer coercion before \& # the XS call. Callers should therefore pass exact integers; values like \& # C<10.9> or C<"1e1"> will be coerced according to Perl\*(Aqs integer conversion. \& \& ### Common parameter pairs (group_size, modulus_size) => security level: \& # generate_key(20, 128) => 80\-bit security (1024\-bit p, 160\-bit q) \& # generate_key(30, 256) => 120\-bit security (2048\-bit p, 240\-bit q) \& # generate_key(32, 256) => 128\-bit security (2048\-bit p, 256\-bit q) \& # generate_key(35, 384) => ~140\-bit security (3072\-bit p, 280\-bit q) \& # 140 bits => generate_key(35, 384) \& # 160 bits => generate_key(40, 512) \& \& ### Sizes according section 4.2 of FIPS 186\-4 \& # (L and N are the bit lengths of p and q respectively) \& # L = 1024, N = 160 => generate_key(20, 128) \& # L = 2048, N = 224 => generate_key(28, 256) \& # L = 2048, N = 256 => generate_key(32, 256) \& # L = 3072, N = 256 => generate_key(32, 384) \& \& $pk\->generate_key($param_hash) \& # $param_hash is { p => $p, q => $q, g => $g } \& # where $p, $q, $g are hex strings \& \& $pk\->generate_key(\e$dsa_param) \& # $dsa_param is the content of DER or PEM file with DSA params \& # e.g. openssl dsaparam 2048 .Ve .SS import_key .IX Subsection "import_key" Loads private or public key in DER or PEM format. .PP .Vb 2 \& my $source = Crypt::PK::DSA\->new(); \& $source\->generate_key(20, 128); \& \& my $public_der = $source\->export_key_der(\*(Aqpublic\*(Aq); \& my $pub = Crypt::PK::DSA\->new(); \& $pub\->import_key(\e$public_der); \& \& my $private_pem = $source\->export_key_pem(\*(Aqprivate\*(Aq, \*(Aqsecret\*(Aq, \*(AqAES\-256\-CBC\*(Aq); \& my $priv = Crypt::PK::DSA\->new(); \& $priv\->import_key(\e$private_pem, \*(Aqsecret\*(Aq); .Ve .PP The same method also accepts filenames instead of buffers. .PP Loading private or public keys from a Perl HASH: .PP .Vb 1 \& $pk\->import_key($hashref); \& \& # where $hashref is a key exported via key2hash \& $pk\->import_key({ \& p => "AAF839A764E04D80824B79FA1F0496C093...", #prime modulus \& q => "D05C4CB45F29D353442F1FEC43A6BE2BE8...", #prime divisor \& g => "847E8896D12C9BF18FE283AE7AD58ED7F3...", #generator of a subgroup of order q in GF(p) \& x => "6C801901AC74E2DC714D75A9F6969483CF...", #private key, random 0 < x < q \& y => "8F7604D77FA62C7539562458A63C7611B7...", #public key, where y = g^x mod p \& }); .Ve .PP Supported key formats: .IP \(bu 4 DSA public keys .Sp .Vb 12 \& \-\-\-\-\-BEGIN PUBLIC KEY\-\-\-\-\- \& MIIBtjCCASsGByqGSM44BAEwggEeAoGBAJKyu+puNMGLpGIhbD1IatnwlI79ePr4 \& YHe2KBhRkheKxWUZRpN1Vd/+usS2IHSJ9op5cSWETiP05d7PMtJaitklw7jhudq3 \& GxNvV/GRdCQm3H6d76FHP88dms4vcDYc6ry6wKERGfNEtZ+4BAKrMZK+gDYsF4Aw \& U6WVR969kYZhAhUA6w25FgSRmJ8W4XkvC60n8Wv3DpMCgYA4ZFE+3tLOM24PZj9Z \& rxuqUzZZdR+kIzrsIYpWN9ustbmdKLKwsqIaUIxc5zxHEhbAjAIf8toPD+VEQIpY \& 7vgJgDhXuPq45BgN19iLTzOJwIhAFXPZvnAdIo9D/AnMw688gT6g6U8QCZwX2XYg \& ICiVcriYVNcjVKHSFY/X0Oi7CgOBhAACgYB4ZTn4OYT/pjUd6tNhGPtOS3CE1oaj \& 5ScbetXg4ZDpceEyQi8VG+/ZTbs8var8X77JdEdeQA686cAxpOaVgW8V4odvcmfA \& BfueiGnPXjqGfppiHAyL1Ngyd+EsXKmKVXZYAVFVI0WuJKiZBSVURU7+ByxOfpGa \& fZhibr0SggWixQ== \& \-\-\-\-\-END PUBLIC KEY\-\-\-\-\- .Ve .IP \(bu 4 DSA private keys .Sp .Vb 12 \& \-\-\-\-\-BEGIN DSA PRIVATE KEY\-\-\-\-\- \& MIIBuwIBAAKBgQCSsrvqbjTBi6RiIWw9SGrZ8JSO/Xj6+GB3tigYUZIXisVlGUaT \& dVXf/rrEtiB0ifaKeXElhE4j9OXezzLSWorZJcO44bnatxsTb1fxkXQkJtx+ne+h \& Rz/PHZrOL3A2HOq8usChERnzRLWfuAQCqzGSvoA2LBeAMFOllUfevZGGYQIVAOsN \& uRYEkZifFuF5LwutJ/Fr9w6TAoGAOGRRPt7SzjNuD2Y/Wa8bqlM2WXUfpCM67CGK \& VjfbrLW5nSiysLKiGlCMXOc8RxIWwIwCH/LaDw/lRECKWO74CYA4V7j6uOQYDdfY \& i08zicCIQBVz2b5wHSKPQ/wJzMOvPIE+oOlPEAmcF9l2ICAolXK4mFTXI1Sh0hWP \& 19DouwoCgYB4ZTn4OYT/pjUd6tNhGPtOS3CE1oaj5ScbetXg4ZDpceEyQi8VG+/Z \& Tbs8var8X77JdEdeQA686cAxpOaVgW8V4odvcmfABfueiGnPXjqGfppiHAyL1Ngy \& d+EsXKmKVXZYAVFVI0WuJKiZBSVURU7+ByxOfpGafZhibr0SggWixQIVAL7Sia03 \& 8bvANjjL9Sitk8slrM6P \& \-\-\-\-\-END DSA PRIVATE KEY\-\-\-\-\- .Ve .IP \(bu 4 DSA private keys in password protected PEM format: .Sp .Vb 3 \& \-\-\-\-\-BEGIN DSA PRIVATE KEY\-\-\-\-\- \& Proc\-Type: 4,ENCRYPTED \& DEK\-Info: DES\-CBC,227ADC3AA0299491 \& \& UISxBYAxPQMl2eK9LMAeHsssF6IxO+4G2ta2Jn8VE+boJrrH3iSTKeMXGjGaXl0z \& DwcLGV+KMR70y+cxtTb34rFy+uSpBy10dOQJhxALDbe1XfCDQIUfaXRfMNA3um2I \& JdZixUD/zcxBOUzao+MCr0V9XlJDgqBhJ5EEr53XHH07Eo5fhiBfbbR9NzdUPFrQ \& p2ASyZtFh7RXoIBUCQgg21oeLddcNWV7gd/Y46kghO9s0JbJ8C+IsuWEPRSq502h \& tSoDN6B0sxbVvOUICLLbQaxt7yduTAhRxVIJZ1PWATTVD7CZBVz9uIDZ7LOv+er2 \& 1q3vkwb8E9spPsA240+BnfD571XEop4jrawxC0VKQZ+3cPVLc6jhIsxvzzFQUt67 \& g66v8GUgt7KF3KhVV7qEtntybQWDWb+K/uTIH9Ra8nP820d3Rnl61pPXDPlluteT \& WSLOvEMN2zRmkaxQNv/tLdT0SYpQtdjw74G3A6T7+KnvinKrjtp1a/AXkCF9hNEx \& DGbxOYo1UOmk8qdxWCrab34nO+Q8oQc9wjXHG+ZtRYIMoGMKREK8DeL4H1RPNkMf \& rwXWk8scd8QFmJAb8De1VQ== \& \-\-\-\-\-END DSA PRIVATE KEY\-\-\-\-\- .Ve .IP \(bu 4 SSH public DSA keys .Sp .Vb 1 \& ssh\-dss AAAAB3NzaC1kc3MAAACBAKU8/avmk...4XOwuEssAVhmwA== .Ve .IP \(bu 4 SSH public DSA keys (RFC\-4716 format) .Sp .Vb 12 \& \-\-\-\- BEGIN SSH2 PUBLIC KEY \-\-\-\- \& Comment: "1024\-bit DSA, converted from OpenSSH" \& AAAAB3NzaC1kc3MAAACBAKU8/avmkFeGnSqwYG7dZnQlG+01QNaxu3F5v0NcL/SRUW7Idp \& Uq8t14siK0mA6yjphLhOf5t8gugTEVBllP86ANSbFigH7WN3v6ydJWqm60pNhNHN//50cn \& NtIsXbxeq3VtsI64pkH1OJqeZDHLmu73k4T0EKOzsylSfF/wtVBJAAAAFQChpubLHViwPB \& +jSvUb8e4THS7PBQAAAIAJD1PMCiTCQa1xyD/NCWOajCufTOIzKAhm6l+nlBVPiKI+262X \& pYt127Ke4mPL8XJBizoTjSQN08uHMg/8L6W/cdO2aZ+mhkBnS1xAm83DAwqLrDraR1w/4Q \& RFxr5Vbyy8qnejrPjTJobBN1BGsv84wHkjmoCn6pFIfkGYeATlJgAAAIAHYPU1zMVBTDWr \& u7SNC4G2UyWGWYYLjLytBVHfQmBa51CmqrSs2kCfGLGA1ynfYENsxcJq9nsXrb4i17H5BH \& JFkH0g7BUDpeBeLr8gsK3WgfqWwtZsDkltObw9chUD/siK6q/dk/fSIB2Ho0inev7k68Z5 \& ZkNI4XOwuEssAVhmwA== \& \-\-\-\- END SSH2 PUBLIC KEY \-\-\-\- .Ve .SS export_key_der .IX Subsection "export_key_der" Returns the key as a binary DER\-encoded string. .PP .Vb 3 \& my $private_der = $pk\->export_key_der(\*(Aqprivate\*(Aq); \& #or \& my $public_der = $pk\->export_key_der(\*(Aqpublic\*(Aq); .Ve .SS export_key_pem .IX Subsection "export_key_pem" Returns the key as a PEM\-encoded string (ASCII). .PP .Vb 5 \& my $private_pem = $pk\->export_key_pem(\*(Aqprivate\*(Aq); \& #or \& my $public_pem = $pk\->export_key_pem(\*(Aqpublic\*(Aq); \& #or \& my $public_pem = $pk\->export_key_pem(\*(Aqpublic_x509\*(Aq); .Ve .PP With parameter \f(CW\*(Aqpublic\*(Aq\fR uses header and footer lines: .PP .Vb 2 \& \-\-\-\-\-BEGIN DSA PUBLIC KEY\-\-\-\-\-\- \& \-\-\-\-\-END DSA PUBLIC KEY\-\-\-\-\-\- .Ve .PP With parameter \f(CW\*(Aqpublic_x509\*(Aq\fR uses header and footer lines: .PP .Vb 2 \& \-\-\-\-\-BEGIN PUBLIC KEY\-\-\-\-\-\- \& \-\-\-\-\-END PUBLIC KEY\-\-\-\-\-\- .Ve .PP Support for password protected PEM keys .PP .Vb 3 \& my $private_pem = $pk\->export_key_pem(\*(Aqprivate\*(Aq, $password); \& #or \& my $private_pem = $pk\->export_key_pem(\*(Aqprivate\*(Aq, $password, $cipher); \& \& # supported ciphers: \*(AqDES\-CBC\*(Aq \& # \*(AqDES\-EDE3\-CBC\*(Aq \& # \*(AqSEED\-CBC\*(Aq \& # \*(AqCAMELLIA\-128\-CBC\*(Aq \& # \*(AqCAMELLIA\-192\-CBC\*(Aq \& # \*(AqCAMELLIA\-256\-CBC\*(Aq \& # \*(AqAES\-128\-CBC\*(Aq \& # \*(AqAES\-192\-CBC\*(Aq \& # \*(AqAES\-256\-CBC\*(Aq (DEFAULT) .Ve .SS encrypt .IX Subsection "encrypt" Returns the ciphertext as a binary string. .PP DSA is usually used for signatures. This helper is available because the underlying library exposes a DSA\-based encryption primitive. .PP .Vb 4 \& my $pk = Crypt::PK::DSA\->new($pub_key_filename); \& my $ct = $pk\->encrypt($message); \& #or \& my $ct = $pk\->encrypt($message, $hash_name); \& \& # $hash_name .. [string] \*(AqSHA1\*(Aq (DEFAULT), \*(AqSHA256\*(Aq or any other hash supported by Crypt::Digest .Ve .SS decrypt .IX Subsection "decrypt" Returns the plaintext as a binary string. .PP .Vb 2 \& my $pk = Crypt::PK::DSA\->new($priv_key_filename); \& my $pt = $pk\->decrypt($ciphertext); .Ve .SS sign_message .IX Subsection "sign_message" Returns the signature as a binary string. .PP .Vb 4 \& my $pk = Crypt::PK::DSA\->new($priv_key_filename); \& my $signature = $pk\->sign_message($message); \& #or \& my $signature = $pk\->sign_message($message, $hash_name); \& \& # $hash_name .. [string] \*(AqSHA1\*(Aq (DEFAULT, INSECURE), \*(AqSHA256\*(Aq or any other hash supported by Crypt::Digest .Ve .PP \&\fBBEWARE:\fR The \f(CW$hash_name\fR default is \f(CW\*(AqSHA1\*(Aq\fR only for backward compatibility. SHA\-1 is vulnerable to practical collision attacks and is not safe for signing messages whose content may be influenced by an attacker. Always pass an explicit hash name such as \f(CW\*(AqSHA256\*(Aq\fR. The same applies to "verify_message". .SS verify_message .IX Subsection "verify_message" Returns \f(CW1\fR if the signature is valid, \f(CW0\fR otherwise. .PP .Vb 4 \& my $pk = Crypt::PK::DSA\->new($pub_key_filename); \& my $valid = $pk\->verify_message($signature, $message); \& #or \& my $valid = $pk\->verify_message($signature, $message, $hash_name); \& \& # $hash_name .. [string] \*(AqSHA1\*(Aq (DEFAULT, INSECURE), \*(AqSHA256\*(Aq or any other hash supported by Crypt::Digest .Ve .SS sign_hash .IX Subsection "sign_hash" Returns the signature as a binary string. .PP .Vb 2 \& my $pk = Crypt::PK::DSA\->new($priv_key_filename); \& my $signature = $pk\->sign_hash($message_hash); .Ve .SS verify_hash .IX Subsection "verify_hash" Returns \f(CW1\fR if the signature is valid, \f(CW0\fR otherwise. .PP .Vb 2 \& my $pk = Crypt::PK::DSA\->new($pub_key_filename); \& my $valid = $pk\->verify_hash($signature, $message_hash); .Ve .SS is_private .IX Subsection "is_private" .Vb 4 \& my $rv = $pk\->is_private; \& # 1 .. private key loaded \& # 0 .. public key loaded \& # undef .. no key loaded .Ve .SS size .IX Subsection "size" .Vb 2 \& my $size = $pk\->size; \& # returns key size (length of the prime p) in bytes or undef if key not loaded .Ve .SS size_q .IX Subsection "size_q" .Vb 2 \& my $size = $pk\->size_q; \& # returns length of the prime q in bytes or undef if key not loaded .Ve .SS key2hash .IX Subsection "key2hash" Returns a hashref with the key components, or \f(CW\*(C`undef\*(C'\fR if no key is loaded. .PP .Vb 1 \& my $hash = $pk\->key2hash; \& \& # returns hash like this (or undef if no key loaded): \& { \& type => 1, # integer: 1 .. private, 0 .. public \& size => 256, # integer: key size in bytes \& # all the rest are hex strings \& p => "AAF839A764E04D80824B79FA1F0496C093...", #prime modulus \& q => "D05C4CB45F29D353442F1FEC43A6BE2BE8...", #prime divisor \& g => "847E8896D12C9BF18FE283AE7AD58ED7F3...", #generator of a subgroup of order q in GF(p) \& x => "6C801901AC74E2DC714D75A9F6969483CF...", #private key, random 0 < x < q \& y => "8F7604D77FA62C7539562458A63C7611B7...", #public key, where y = g^x mod p \& } .Ve .SH "OpenSSL interoperability" .IX Header "OpenSSL interoperability" .Vb 4 \& ### let\*(Aqs have: \& # DSA private key in PEM format \- dsakey.priv.pem \& # DSA public key in PEM format \- dsakey.pub.pem \& # data file to be signed \- input.data .Ve .SS "Sign by OpenSSL, verify by Crypt::PK::DSA" .IX Subsection "Sign by OpenSSL, verify by Crypt::PK::DSA" Create signature (from commandline): .PP .Vb 1 \& openssl dgst \-sha256 \-sign dsakey.priv.pem \-out input.sha256\-dsa.sig input.data .Ve .PP Verify signature (Perl code): .PP .Vb 3 \& use Crypt::PK::DSA; \& use Crypt::Digest \*(Aqdigest_file\*(Aq; \& use Crypt::Misc \*(Aqread_rawfile\*(Aq; \& \& my $pkdsa = Crypt::PK::DSA\->new("dsakey.pub.pem"); \& my $signature = read_rawfile("input.sha256\-dsa.sig"); \& my $valid = $pkdsa\->verify_hash($signature, digest_file("SHA256", "input.data")); \& print $valid ? "SUCCESS" : "FAILURE"; .Ve .SS "Sign by Crypt::PK::DSA, verify by OpenSSL" .IX Subsection "Sign by Crypt::PK::DSA, verify by OpenSSL" Create signature (Perl code): .PP .Vb 3 \& use Crypt::PK::DSA; \& use Crypt::Digest \*(Aqdigest_file\*(Aq; \& use Crypt::Misc \*(Aqwrite_rawfile\*(Aq; \& \& my $pkdsa = Crypt::PK::DSA\->new("dsakey.priv.pem"); \& my $signature = $pkdsa\->sign_hash(digest_file("SHA256", "input.data")); \& write_rawfile("input.sha256\-dsa.sig", $signature); .Ve .PP Verify signature (from commandline): .PP .Vb 1 \& openssl dgst \-sha256 \-verify dsakey.pub.pem \-signature input.sha256\-dsa.sig input.data .Ve .SS "Keys generated by Crypt::PK::DSA" .IX Subsection "Keys generated by Crypt::PK::DSA" Generate keys (Perl code): .PP .Vb 2 \& use Crypt::PK::DSA; \& use Crypt::Misc \*(Aqwrite_rawfile\*(Aq; \& \& my $pkdsa = Crypt::PK::DSA\->new; \& $pkdsa\->generate_key(20, 128); \& write_rawfile("dsakey.pub.der", $pkdsa\->export_key_der(\*(Aqpublic\*(Aq)); \& write_rawfile("dsakey.priv.der", $pkdsa\->export_key_der(\*(Aqprivate\*(Aq)); \& write_rawfile("dsakey.pub.pem", $pkdsa\->export_key_pem(\*(Aqpublic_x509\*(Aq)); \& write_rawfile("dsakey.priv.pem", $pkdsa\->export_key_pem(\*(Aqprivate\*(Aq)); \& write_rawfile("dsakey\-passwd.priv.pem", $pkdsa\->export_key_pem(\*(Aqprivate\*(Aq, \*(Aqsecret\*(Aq)); .Ve .PP Use keys by OpenSSL: .PP .Vb 5 \& openssl dsa \-in dsakey.priv.der \-text \-inform der \& openssl dsa \-in dsakey.priv.pem \-text \& openssl dsa \-in dsakey\-passwd.priv.pem \-text \-inform pem \-passin pass:secret \& openssl dsa \-in dsakey.pub.der \-pubin \-text \-inform der \& openssl dsa \-in dsakey.pub.pem \-pubin \-text .Ve .SS "Keys generated by OpenSSL" .IX Subsection "Keys generated by OpenSSL" Generate keys: .PP .Vb 5 \& openssl dsaparam \-genkey \-out dsakey.priv.pem 1024 \& openssl dsa \-in dsakey.priv.pem \-out dsakey.priv.der \-outform der \& openssl dsa \-in dsakey.priv.pem \-out dsakey.pub.pem \-pubout \& openssl dsa \-in dsakey.priv.pem \-out dsakey.pub.der \-outform der \-pubout \& openssl dsa \-in dsakey.priv.pem \-passout pass:secret \-des3 \-out dsakey\-passwd.priv.pem .Ve .PP Load keys (Perl code): .PP .Vb 1 \& use Crypt::PK::DSA; \& \& my $pkdsa = Crypt::PK::DSA\->new; \& $pkdsa\->import_key("dsakey.pub.der"); \& $pkdsa\->import_key("dsakey.priv.der"); \& $pkdsa\->import_key("dsakey.pub.pem"); \& $pkdsa\->import_key("dsakey.priv.pem"); \& $pkdsa\->import_key("dsakey\-passwd.priv.pem", "secret"); .Ve .SH "SEE ALSO" .IX Header "SEE ALSO" .IP \(bu 4