Re: LibreSSL vs. OpenSSL enc command

On Wed, Dec 4, 2019 at 1:05 PM Dieter Rauschenberger
<d.rauschenb@gmail.com> wrote:
>
> i have encrypted several documents with
>
> openssl enc -aes-256-cbc -e < FOO > FOO.aes256
>
> This was serveral years ago before Libressl was invented. Now I wanted
> to decrypt the docs with:
>
> openssl enc -aes-256-cbc -d < FOO.aes256 > FOO
>
> This did not work. The password did not work anymore. I had to install
> openssl-1.0.2t via packages. This works:
>
> eopenssl enc -aes-256-cbc -d < FOO.aes256 > FOO
>
> My password is accepted. The document appeared in plaintext.
> Is there a trick to do this with libressl from base?

OpenSSL changed the hash used in the key derivation function sometime
around OpenSSL 1.0.2. Formerly is was MD5. I believe it was changed to
SHA256.

I believe the command line option to changed the derivation hash is
-md. You might try adding -md md5 or -md sha1.

Jeff