When you run the command
openssl enc -ciphers a list of supported ciphers is printed. In more recent versions of the OpenSSL utility the ciphers -id-aes256-wrap, -id-aes256-wrap-pad, and -aes256-wrap appear in that list. I believe these are implementations of the AES Key Wrapping algorithms specified in RFC3394, and RFC5649. When I go to use them to wrap a 256 bit key though as follows I get an error...
openssl enc -id-aes256-wrap -in test.key -out test.key.wrp Error setting cipher id-aes256-wrap 140403454670488:error:0607B0AA:digital envelope routines:EVP_CipherInit_ex:wrap mode not allowed:evp_enc.c:218:
When I searched for the error "wrap mode not allowed" I found this message board text discussing how some special flags need to be set. But the discussion is in relation to using the openssl library's C API. Is it possible to use these key wrapping ciphers from the openssl enc utility and if so how?