OpenSSL Demonstration Applications

This folder contains source code that demonstrates the proper use of the OpenSSL

library API.

Note: Makefiles are provided in the demo subfolders to demonstrate how to build

them, but are not frequently used. Configure openssl with enable-demos to build

them automatically through the perl based build system

bio: Demonstration of a simple TLS client and server

certs: Demonstration of creating certs, using OCSP

cipher:

aesgcm.c Demonstration of symmetric cipher GCM mode encrypt/decrypt

aesccm.c Demonstration of symmetric cipher CCM mode encrypt/decrypt

ariacbc.c Demonstration of symmetric cipher CBC mode encrypt/decrypt

cms: Demonstrations related to the Cryptographic Message

Syntax (CMS) standard

digest:

EVP_MD_demo.c Compute a digest from multiple buffers

EVP_MD_stdin.c Compute a digest with data read from stdin

EVP_MD_xof.c Compute a digest using the SHAKE256 XOF

EVP_f_md.c Compute a digest using BIO and EVP_f_md

encode:

rsa_encode.c Encode and decode PEM-encoded RSA keys

encrypt:

rsa_encrypt.c Encrypt and decrypt data using an RSA keypair.

guide: Sample code from the OpenSSL Guide tutorials. See

the oss-guide-quic-introduction(7) man page.

quic-client-block.c: A simple blocking QUIC client

quic-client-non-block.c: A simple non-blocking QUIC client

quic-multi-stream.c: A simple QUIC client using multiple streams

quic-server-block.c: A simple blocking QUIC server

quic-server-non-block.c: A simple non-blocking QUIC server

tls-client-block.c: A simple blocking SSL/TLS client

tls-client-non-block.c: A simple non-blocking SSL/TLS client

tls-server-block.c: A simple blocking SSL/TLS server

http3: Demonstration of how to use OpenSSL's QUIC capabilities

for HTTP/3.

info:

fips-version.c Demonstration of how to query the FIPS provider version

kdf:

hkdf.c Demonstration of HMAC based key derivation

pbkdf2.c Demonstration of PBKDF2 password based key derivation

scrypt.c Demonstration of SCRYPT password based key derivation

keyexch:

x25519.c Demonstration of X25519 based key exchange

ecdh.c Demonstration of ECDH key exchange

mac:

gmac.c Demonstration of GMAC message authentication

poly1305.c Demonstration of Poly1305-AES message authentication

siphash.c Demonstration of SIPHASH message authentication

pkcs12:

pkread.c Print out a description of a PKCS12 file.

pkwrite.c Add a password to an existing PKCS12 file.

pkey:

EVP_PKEY_EC_keygen.c Generate an EC key.

EVP_PKEY_RSA_keygen.c Generate an RSA key.

EVP_PKEY_DSA_keygen.c Generate a DSA key.

EVP_PKEY_DSA_paramgen.c Generate a DSA param key.

EVP_PKEY_DSA_paramvalidate.c Validate a DSA param key.

EVP_PKEY_DSA_paramfromdata.c Load a DSA param key using raw data.

signature:

EVP_EC_Signature_demo.c Compute and verify an EC signature.

EVP_DSA_Signature_demo.c Compute and verify a DSA signature.

EVP_ED_Signature_demo.c Compute and verify an ED25519 signature.

rsa_pss_direct.c Compute and verify an RSA-PSS signature from a hash

rsa_pss_hash.c Compute and verify an RSA-PSS signature over a buffer

smime: Demonstrations related to S/MIME

sslecho:

echecho.c Simple SSL/TLS echo client/server that uses ECH.

main.c Simple SSL/TLS echo client/server.