Toolkit for Encryption, Signatures and Certificates Based on OpenSSL
Bindings to OpenSSL libssl and libcrypto, plus custom SSH key parsers. Supports RSA, DSA and EC curves P-256, P-384, P-521, and curve25519. Cryptographic signatures can either be created and verified manually or via x509 certificates. AES can be used in cbc, ctr or gcm mode for symmetric encryption; RSA for asymmetric (public key) encryption or EC for Diffie Hellman. High-level envelope functions combine RSA and AES for encrypting arbitrary sized data. Other utilities include key generators, hash functions (md5, sha1, sha256, etc), base64 encoder, a secure random number generator, and 'bignum' math methods for manually performing crypto calculations on large multibyte integers.
Download and verify an SSL certrificate:
library(openssl)
cert <- download_ssl_cert("www.r-project.org")
cert_verify(cert, ca_bundle())
print(cert)
as.list(cert[[1]])Encrypt a secret message using someone's RSA public key:
# Generate test keys
key <- rsa_keygen()
pubkey <- as.list(key)$pubkey
# Encrypt tempkey using receivers public RSA key
secret <- charToRaw("TTIP is evil")
ciphertext <- rsa_encrypt(secret, pubkey)
# Receiver decrypts secret from private her RSA key
rawToChar(rsa_decrypt(ciphertext, key))Create a signature using your RSA private key:
# Sign a file with your private key
myfile <- system.file("DESCRIPTION")
sig <- signature_create(myfile, key = key)
# Others can verify form your public key
signature_verify(myfile, sig, pubkey = pubkey)Binary packages for OS-X or Windows can be installed directly from CRAN:
install.packages("openssl")Installation from source on Linux requires openssl. On Debian or Ubuntu use libssl-dev:
sudo apt-get install -y libssl-dev
On Fedora, CentOS or RHEL use openssl-devel:
sudo yum install openssl-devel
On OS-X we need openssl from homebrew, which may be installed as:
brew install openssl
To check which version you are running (run in a fresh terminal):
openssl version -a