OPENSSL-PKCS8(1ssl) OpenSSL OPENSSL-PKCS8(1ssl) (NAME) openssl-pkcs8 - PKCS#8 (SYNOPSIS) openssl pkcs8 [-help] [-topk8] [-inform DER|PEM] [-outform DER|PEM] [-in filename] [-passin arg] [-out filename] [-passout arg] [-iter count] [-noiter] [-nocrypt] [-traditional] [-v2 alg] [-v2prf alg] [-v1 alg] [-scrypt] [-scrypt_N N] [-scrypt_r r] [-scrypt_p p] [-saltlen size] [-rand files] [-writerand file] [-engine id] [-provider name] [-provider-path path] [-provparam [name:]key=value] [-propquery propq] (DESCRIPTION) PKCS#8 . PKCS#8 PrivateKeyInfo EncryptedPrivateKeyInfo PKCS#5 ( v1.5 v2.0) PKCS#12 . (OPTIONS) -help . -topk8 PKCS#8 . -topk8 : PKCS#8 . -inform DER|PEM, -outform DER|PEM PEM . openssl-format-options(1) . PKCS#8 ( -topk8 ) PKCS#8 . -nocrypt . -topk8 PEM PKCS#8 . -traditional (traditional) . -topk8 DER DER . -topk8 -inform . PKCS#8 -nocrypt . -traditional -topk8 (traditional) . -in filename . -passin . -passin arg, -passout arg . arg openssl-passphrase-options(1) . -out filename . . / (atomic) (truncate) . -passout . . -iter count PKCS#8 PKCS#8 . PKCS#8 (brute- force) . -noiter PKCS#8 . -nocrypt PKCS#8 EncryptedPrivateKeyInfo PKCS#8 . PrivateKeyInfo . . . -v2 alg PKCS#5 v2.0 . alg aes128 aes256 des3 . aes256 . -v2prf alg PRF PKCS#5 v2.0 . hmacWithSHA256 . hmacWithSHA256 . PRF hmacWithSHA1 . -v1 alg PKCS#5 v1.5 PKCS#12 . PKCS#5 v2.0 . PKCS#5 v2.0 . -scrypt scrypt : N=16384 r=8 p=1 AES CBC . -scrypt_N -scrypt_r -scrypt_p -v2 . -scrypt_N N, -scrypt_r r, -scrypt_p p N r p scrypt . -saltlen (salt ) PBE . PBES2 ( ) PBES1 ( ) . -rand files, -writerand file << (Random State Options)>> openssl(1) . -engine id << (Engine Options)>> openssl(1) . . -provider name -provider-path path -provparam [name:]key=value -propquery propq << (Provider Options)>> openssl(1) provider(7) property(7) . (NOTES) PKCS#8 PKCS#5 v2.0 AES HMAC SHA256 . PKCS#5 v2.0 PKCS#5 v1.5 DES . PKCS#5 v2.0 SSLeay . . DER PKCS#8 ASN1 PEM . PKCS#5 V1.5 PKCS#12 (PKCS#5 V1.5 AND PKCS#12 ALGORITHMS) -v1 PKCS#5 v1.5 PKCS#12. . PBE-MD2-DES PBE-MD5-DES PKCS#5 v1.5 . DES . PBE-SHA1-RC2-64, PBE-MD2-RC2-64, PBE-MD5-RC2-64, PBE-SHA1-DES PKCS#5 v1.5 . PKCS#5 v2.0 RC2 DES . PBE-SHA1-RC4-128, PBE-SHA1-RC4-40, PBE-SHA1-3DES, PBE-SHA1-2DES, PBE-SHA1-RC2-128, PBE-SHA1-RC2-40 PKCS#12 triple DES RC2 . (EXAMPLES) PKCS#8 (AES hmacWithSHA256): openssl pkcs8 -in key.pem -topk8 -out enckey.pem PKCS#8: openssl pkcs8 -in key.pem -topk8 -nocrypt -out enckey.pem PKCS#5 v2.0 triple DES: openssl pkcs8 -in key.pem -topk8 -v2 des3 -out enckey.pem PKCS#5 v2.0 AES CBC PRF hmacWithSHA512: openssl pkcs8 -in key.pem -topk8 -v2 aes-256-cbc -v2prf hmacWithSHA512 -out enckey.pem PKCS#8 PKCS#5 1.5 ( DES): openssl pkcs8 -in key.pem -topk8 -v1 PBE-MD5-DES -out enckey.pem PKCS#8 PKCS#12 ( 3DES): openssl pkcs8 -in key.pem -topk8 -out enckey.pem -v1 PBE-SHA1-3DES DER PKCS#8: openssl pkcs8 -inform DER -nocrypt -in key.der -out key.pem PKCS#8 (traditional): openssl pkcs8 -in pk8.pem -traditional -out key.pem PKCS#8 AES-256 : openssl pkcs8 -in key.pem -topk8 -v2 aes-256-cbc -iter 1000000 -out pk8.pem (STANDARDS) (Test vectors) PKCS#5 v2.0 triple DES DES RC2 pkcs-tng PKCS#5 v2.0 . PKCS#8 DSA ( ) : PKCS#11 v2.01 11.9 . PKCS#8 DSA OpenSSL . (BUGS) . (SEE ALSO) openssl(1) openssl-dsa(1) openssl-rsa(1) openssl-genrsa(1) openssl-gendsa(1) (HISTORY) -iter OpenSSL 1.1.0 . -engine OpenSSL 3.0 . (COPYRIGHT) Copyright 2000-2026 The OpenSSL Project Authors. All Rights Reserved. . (Apache License 2.0) (<<>>). . LICENSE . 3.6.4 2026-08-25 OPENSSL-PKCS8(1ssl)