---
name: "plainrsa-gen"
section: "8"
platform: "linux"
package: "racoon"
version: "1:0.8.2+20140711-8+deb9u1"
release: "Debian 9 (Stretch)"
platforms: ["linux"]
url: "https://new.carta.tech/plainrsa-gen"
---

# plainrsa-gen(8)

generator for Plain RSA keys

## NAME

**plainrsa-gen** – generator for Plain RSA keys

## SYNOPSIS

**plainrsa-gen** \[**-b** *bits*\] \[**-e** *pubexp*\] \[**-f** *outfile*\] \[**-h**\]

## DESCRIPTION

**plainrsa-gen** can be used to generate Plain RSA keys for authentication purposes. Using Plain RSA keys is optional. Other possibilities are Pre-shared keys or X.509 certificates.

- **-b** *bits*

  bit length of the key. Default is 1024, recommended length is 2048 or even 4096 bits. Note that generating longer keys takes longer time.

- **-e** *pubexp*

  value of RSA public exponent. Default is 0x3. Don't change this unless you really know what you are doing!

- **-f** *outfile*

  *outfile* instead of stdout. If the file already exists it won't be overwritten. You wouldn't like to lose your private key by accident, would you?

## OUTPUT FILE FORMAT

This is the secret private key that should **never** leave your computer:

```
: RSA	{
	# RSA 1024 bits
	# pubkey=0sAQOrWlcwbAIdNSMhDt...
	Modulus: 0xab5a57306c021d3523...
	PublicExponent: 0x03
	PrivateExponent: 0x723c3a2048...
	Prime1: 0xd309b30e6adf9d85c01...
	Prime2: 0xcfdc2a8aa5b2b3c90e3...
	Exponent1: 0x8cb122099c9513ae...
	Exponent2: 0x8a92c7071921cd30...
	Coefficient: 0x722751305eafe9...
  }
```

The line pubkey=0sAQOrW... of the private key contains a public key that should be stored in the other peer's configuration in this format:

```
: PUB 0sAQOrWlcwbAIdNSMhDt...
```

You can also specify from and to addresses for which the key is valid:

```
0.0.0.0/0 10.20.30.0/24 : PUB 0sAQOrWlcwbAIdNSMhDt...
```

## SEE ALSO

[racoon.conf(5)](/racoon.conf/5.md), [racoon(8)](/racoon/8.md)

## HISTORY

**plainrsa-gen** was written by Michal Ludvig ⟨michal@logix.cz⟩ and first appeared in **ipsec-tools** **0.4**.