PKCS12_PACK_P7ENCDATA(3ossl)

📦 version 3.5.0, in opensuse-leap 16.0

✨ PKCS12_PACK_P7ENCDATA 💅

okay so bestie, welcome to the 3ossl manual page for PKCS12_pack_p7encdata and PKCS12_pack_p7encdata_ex 🫶 — these two are literally the ones that pack a whole set of PKCS#12 safeBags into a PKCS#7 encrypted data object. yes, that's the whole vibe. no cap.

🌸 NAME 🌸

PKCS12_pack_p7encdata, PKCS12_pack_p7encdata_ex — pack a set of PKCS#12 safeBags into a PKCS#7 encrypted data object 🎀

🦋 SYNOPSIS 🦋

#include <openssl/pkcs12.h>

PKCS7 *PKCS12_pack_p7encdata(int pbe_nid, const char *pass, int passlen,
                             unsigned char *salt, int saltlen, int iter,
                             STACK_OF(PKCS12_SAFEBAG) *bags);
PKCS7 *PKCS12_pack_p7encdata_ex(int pbe_nid, const char *pass, int passlen,
                                unsigned char *salt, int saltlen, int iter,
                                STACK_OF(PKCS12_SAFEBAG) *bags,
                                OSSL_LIB_CTX *ctx, const char *propq);

like, look at those signatures. gorgeous. iconic. copy them exactly please, my love 💖

💜 DESCRIPTION 💜

the OG: PKCS12_pack_p7encdata()

so PKCS12_pack_p7encdata() generates a PKCS#7 ContentInfo object of encrypted-data type — like, it takes your set of safeBags bags and wraps them all up in encrypted goodness ✨

the algorithm ID in pbe_nid is lowkey flexible, and honestly she can be three things:

  • a PKCS#12 password based encryption algorithm
  • a PKCS#5 password based encryption algorithm
  • or a cipher algorithm 👑

and if you pass in a cipher algorithm? the PKCS#5 PBES2 algorithm gets used, with that cipher as a parameter. periodt.

the inputs into the encryption operation are:

  • the password pass, of length passlen
  • the salt salt, of length saltlen
  • the iteration count iter

all three go straight into the encryption operation, no detours 🧚

the upgraded one: PKCS12_pack_p7encdata_ex()

PKCS12_pack_p7encdata_ex() operates similar to the above — same energy, same job — but she also lets you pass in a library context ctx and a property query propq so you can select the algorithm implementation 💅

like. she's the main character version. the _ex is giving extra and we love that for her.

🌈 RETURN VALUES 🌈

a PKCS7 object if successful 🎉 or NULL if an error occurred 😭 (yes, check your returns, bestie, i'm begging).

⭐ CONFORMING TO ⭐

IETF RFC 2315 — [https://tools.ietf.org/html/rfc2315](https://tools.ietf.org/html/rfc2315) 📜

🍓 SEE ALSO 🍓

go read it, iykyk 🫶

💫 HISTORY 💫

PKCS12_pack_p7encdata_ex() was added in OpenSSL 3.0 — so if you're on something older, she simply does not exist yet, sorry bestie 🙈

Copyright 2021 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at [https://www.openssl.org/source/license.html](https://www.openssl.org/source/license.html).

okay that's the whole page, fr fr. go encrypt something gorgeous 💖

alright bestie, that's a wrap — this was PKCS12_PACK_P7ENCDATA(3ossl), version 3.5.0, dated 2026-09-25, and honestly? she ate. mwah 💋✨🎀

📦 where this page comes from