OPENSSL-PKCS8(1ssl) OpenSSL OPENSSL-PKCS8(1ssl) openssl-pkcs8 - PKCS#8 openssl pkcs8 [-help] [-topk8] [-inform DER|PEM] [-outform DER|PEM] [-in filename] [-passin arg] [-out filename] [-passout arg] [-iter count] [-noiter] [-nocrypt] [-traditional] [-v2 alg] [-v2prf alg] [-v1 alg] [-scrypt] [-scrypt_N N] [-scrypt_r r] [-scrypt_p p] [-saltlen size] [-rand files] [-writerand file] [-engine id] [-provider name] [-provider-path path] [-provparam [name:]key=value] [-propquery propq] PKCS#8. PrivateKeyInfo EncryptedPrivateKeyInfo PKCS#5 ( 1.5 2.0) PKCS#12. -help . -topk8 PKCS#8 . -topk8 : PKCS#8. -inform DER|PEM -outform DER|PEM PEM. openssl-format-options(1) . PKCS#8 ( -topk8 ) PKCS#8. -nocrypt. -topk8 PEM PKCS#8. -traditional . -topk8 DER DER . -topk8 -inform. PKCS#8 -nocrypt. -traditional -topk8 . -in _ . -passin. -passin -passout . arg openssl-passphrase-options(1). -out _ . . / . . -passout . . -iter PKCS#8 PKCS#8. PKCS#8 . -noiter PKCS#8 1 . -nocrypt PKCS#8 EncryptedPrivateKeyInfo . PrivateKeyInfo . . Java . -v2 alg PKCS#5 2.0. alg aes128 aes256 des3. aes256. -v2prf alg PRF PKCS#5 v2.0. hmacWithSHA256. hmacWithSHA256 . PRF hmacWithSHA1 . -v1 alg PKCS#5 v1.5 PKCS#12. PKCS#5 v2.0 . PKCS#5 v2.0. -scrypt scrypt : N=16384 r=8 p=1 AES CBC 256 . -scrypt_N -scrypt_r -scrypt_p -v2. -scrypt_N N -scrypt_r r -scrypt_p p scrypt N r p. -saltlen () PBE. PBES2 16 (128 ) 8 (64 ) PBES1. -rand -writerand " " openssl(1) . -engine id " " openssl(1). . -provider -provider-path -provparam [:]= -propquery propq " " openssl(1) provider(7) property(7). PKCS#8 PKCS#5 v2.0 AES 256 HMAC SHA256. PKCS#5 v2.0 PKCS#5 v1.5 DES 56 . PKCS#5 v2.0 SSLeay. . DER PKCS#8 ASN1 PEM. PKCS#5 V1.5 PKCS#12 -v1 PKCS#5 v1.5 PKCS#12. . PBE-MD2-DES PBE-MD5-DES PKCS#5 v1.5 . 56 DES. PBE-SHA1-RC2-64 PBE-MD2-RC2-64 PBE-MD5-RC2-64 PBE-SHA1-DES PKCS#5 v1.5 . PKCS#5 v2.0. RC2 64 DES 56 . PBE-SHA1-RC4-128 PBE-SHA1-RC4-40 PBE-SHA1-3DES PBE-SHA1-2DES PBE-SHA1-RC2-128 PBE-SHA1-RC2-40 PKCS#12 triple DES RC2 128 . PKCS#8 (AES 256 hmacWithSHA256): openssl pkcs8 -in key.pem -topk8 -out enckey.pem PKCS#8 : openssl pkcs8 -in key.pem -topk8 -nocrypt -out enckey.pem PKCS#5 v2.0 DES : openssl pkcs8 -in key.pem -topk8 -v2 des3 -out enckey.pem PKCS#5 v2.0 AES 256 CBC PRF hmacWithSHA512: openssl pkcs8 -in key.pem -topk8 -v2 aes-256-cbc -v2prf hmacWithSHA512 -out enckey.pem PKCS#8 PKCS#5 1.5 (DES): openssl pkcs8 -in key.pem -topk8 -v1 PBE-MD5-DES -out enckey.pem PKCS#8 PKCS#12 (3DES): openssl pkcs8 -in key.pem -topk8 -out enckey.pem -v1 PBE-SHA1-3DES PKCS#8 DER: openssl pkcs8 -inform DER -nocrypt -in key.der -out key.pem PKCS#8 : openssl pkcs8 -in pk8.pem -traditional -out key.pem PKCS#8 AES-256 : openssl pkcs8 -in key.pem -topk8 -v2 aes-256-cbc -iter 1000000 -out pk8.pem PKCS#5 v2.0 pkcs-tng DES DES RC2 PKCS#5 v2.0 . PKCS#8 DSA () : PKCS#11 v2.01 11.9. DSA OpenSSL . . openssl(1), openssl-dsa(1), openssl-rsa(1), openssl-genrsa(1), openssl-gendsa(1) -iter OpenSSL 1.1.0. -engine OpenSSL 3.0. 2000-2025 OpenSSL. . Apache 2.0 ( ""). . LICENSE . 3 . . : . 3.6.2 7 2026 OPENSSL-PKCS8(1ssl)