0
$\begingroup$

I don't want openssl to log my keys and passwords... but I don't use gpg as I need more manual control for my purpose. I also don't like gpg and would like to use openssl without logging.

Does openssl too engaging in logging when I open the interpreter

Openssl

My main question revolves around linux logging when others have access to my offline pc?

$\endgroup$

closed as off-topic by Squeamish Ossifrage, forest, AleksanderRas, Geoffroy Couteau, Maarten Bodewes Jun 20 at 21:51

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Programming questions are off-topic even if you are writing or debugging cryptographic code. Unless your question is specifically about how the cryptographic algorithm, protocol or side-channel (mitigation) works, you should look into asking on Stack Overflow instead." – Squeamish Ossifrage, forest, AleksanderRas, Geoffroy Couteau, Maarten Bodewes
If this question can be reworded to fit the rules in the help center, please edit the question.

  • $\begingroup$ Why do you think openssl logs your keys and passwords? It is open source. See the sources. Have you found a place in the source code that logs your keys and passwords? $\endgroup$ – mentallurg Jun 16 at 9:17
  • $\begingroup$ Could you please provide the specific output of openssl command where you suspects some sensitive info is logged? $\endgroup$ – Oleg Jun 16 at 19:22
  • $\begingroup$ @Oleg glad to hear it doesn't log... but what about kernel logs? That is what I meant, in context of linux logging $\endgroup$ – Mini kute Jun 16 at 20:33
  • $\begingroup$ @Mini kute - again the same - please provide the suspicious logs and we will analyse it and find is there any sensitive info leak. Usually Linux kernel doesn't print every memory byte to log and has not clue which crypto operation does openssl do at the moment. $\endgroup$ – Oleg Jun 17 at 6:26
1
$\begingroup$

If you are afraid that somebody can get access to your private keys or passwords, disconnect your machine from network and never connect it again; transfer public keys that you want to publish via USB stick; when you need to encrypt or decrypt something, use USB stick, put there the needed files, attach it to your offline machine, encrypt or decrypt on this machine, put result back to USB stick.

Depending on how important are purposes you use openssl for, you may want to put your machine in some room with proper electromagnetic and sound isolation :) And first of all, make sure nobody gets physical access to this machine :)

$\endgroup$

Not the answer you're looking for? Browse other questions tagged or ask your own question.