Collection of files with various keys stored in in different formats and using different encryption algorithms.

The names should be mostly self-explanatory, below are some more tricky parts:

• default - value is using the ASN.1 default value and as such is omitted from DER encoding
• salt - length of salt used for the algorithm, in bytes
• iter - number of iterations that the PRF needs to be run, actual number
• keyLen - for PBKDF2: length of the key to output, in bytes
• prf - for PBKDF2: pseudo-random function, default is hmacWithSHA1
• bf-cbc - Blowfish cipher in CBC mode
• IV - length of initialisation vector used, in bytes
• none - when a specific entry in file does not use encryption, it's specified as none
• pass - the parameter is the name of the password used for both integrity (MAC) and encryption
• pass-mac - name of password used for integrity check
• pass-cipher - name of password used for encryption
• ber(inf) - when the files use the BER indefinite form encoding for some items in the structure
• sha512-224, sha512-256 - identifiers for the SHA2-512/224 and SHA2-512/256, the SHA-2 hashes with a 512bit internal state but 224 and 256 bit output respectively

Other encryption method names correspond with the short OID names assigned to them.

Unless the file is marked as "malformed", the files are well-formed and can be created by using programming interfaces of either OpenSSL, GnuTLS or NSS. Not all files can be created using the command line interface of those libraries.

Default settings

Different applications and libraries create files in different formats and with different settings. The following are some examples.

OpenSSL

OpenSSL 1.1.0 pkcs12 command by default will create a PKCS#12 file with settings like the ones used in rsa(2048,sha256),cert(pbeWithSHAAnd40BitRC2-CBC,salt(8),iter(2048)),key(pbeWithSHAAnd3-KeyTripleDES-CBC,salt(8),iter(2048)),mac(sha1,salt(8),iter(2048)),pass(ascii).p12 file, if it was compiled with RC2 support. If OpenSSL was compiled without RC2 support, it will create a file like rsa(2048,sha256),cert&key(pbeWithSHAAnd3-KeyTripleDES-CBC,salt(8),iter(2048)),mac(sha1,salt(8),iter(2048)),pass(ascii).p12 .

OpenSSL versions before 1.1.0, when PBES2 encryption is specified by user, will always use the default hmac for PBKDF2 (i.e. hmacWithSHA1). Later versions (i.e. 1.1.0 and 1.1.1) always use hmacWithSHA256 for PBKDF2 in PKCS#12 files.

GnuTLS

GnuTLS certtool command by default will create a PKCS#12 file with settings like the ones used in 'rsa(2048,sha256),cert(pbeWithSHAAnd3-KeyTripleDES-CBC,salt(8),iter(5318)),key(pbeWithSHAAnd3-KeyTripleDES-CBC,salt(8),iter(5204)),mac(sha1,salt(8),iter(10240),pass(ascii).p12'

If the cipher is specified (aes-128), it will create a PKCS#12 file with settings like the ones used in rsa(2048,sha256),cert(PBES2(PBKDF2(salt(18),iter(5127),keyLen(default),prf(default)),aes-128-cbc(IV(16)))),key(PBES2(PBKDF2(salt(16),iter(5301),keyLen(default),prf(default)),aes-128-cbc(IV(16)))),mac(sha1,salt(8),iter(10240)),pass(ascii).p12

NSS

NSS pk12util command creates PKCS#12 files with the BER indefinite form encoding, and other settings as used in rsa(2048,sha256),key(pbeWithSHAAnd3-KeyTripleDES-CBC,salt(16),iter(2000)),cert(pbeWithSHAAnd40BitRC2-CBC,salt(16),iter(2000)),mac(sha1,salt(16),iter(2000)),pass(ascii),ber(inf).p12 and rsa(2048,sha256),key(pbeWithSHAAnd3-KeyTripleDES-CBC,salt(16),iter(2000)),cert(pbeWithSHAAnd40BitRC2-CBC,salt(16),iter(2000)),mac(sha1,salt(16),iter(2000)),pass(unicode,nss-3.28.3-1.1.fc24),ber(inf).p12

Note, order reversal (first key then certificate) represents the internal PKCS#12 PDU order.