Use -pkeyopt option to pass paramset to algorithm. The following paramsets
are supported by
gost2001: 0,A,B,C,XA,XB
- gost2012_256: 0,A,B,C,XA,XB
- gost2012_512: A,B
+ gost2012_256: 0,A,B,C,XA,XB,TCA,TCB,TCC,TCD
+ gost2012_512: A,B,C
You can also use numeric representation of OID as to destinate
paramset.
Calculation of HMAC based on GOST R 34.11-94
- openssl dgst -md_gost94 -mac hmac -macopt key:<32 bytes of key> datafile
+ openssl dgst -md_gost94 -hmac <32 bytes of key> datafile
(or use hexkey if key contain NUL bytes)
Calculation of GOST 28147 MAC