openssl pkeyutl \
	-encrypt \
	-in largefile.txt \
	-pubin -inkey pubkey-B.pem \
	-out ciphertext.bin

openssl rand \
	-base64 32 \
	-out symkey.pem

openssl pkeyutl \
	-encrypt \
	-in symkey.pem \
	-pubin -inkey pubkey-B.pem \
	-out symkey.enc

openssl dgst \
	-sha1 \
	-sign privkey-A.pem \
	-out signature.bin \
	symkey.pem

openssl pkeyutl \
	-decrypt \
	-in symkey.enc \
	-inkey privkey-B.pem \
	-out symkey.pem

openssl dgst \
	-sha1 \
	-verify pubkey-A.pem \
	-signature signature.bin \
	symkey.pem

openssl enc \
	-aes-256-cbc \
	-pass file:symkey.pem \
	-p \
	-md sha256 \
	-in largefile.txt \
	-out ciphertext.bin

openssl enc \
	-aes-256-cbc \
	-d \
	-pass file:symkey.pem \
	-p \
	-md sha256 \
	-in ciphertext.bin \
	-out largefile.txt