Wednesday, December 04, 2019

Re: LibreSSL vs. OpenSSL enc command

Dieter Rauschenberger:

> This was serveral years ago before Libressl was invented. Now I wanted
> to decrypt the docs with:
>
> openssl enc -aes-256-cbc -d < FOO.aes256 > FOO
>
> This did not work. The password did not work anymore.

The default message digest function used for key derivation changed
from MD5 to SHA256 in OpenSSL 1.1.0 and LibreSSL followed suit.

openssl enc -aes-256-cbc -d -md md5 < FOO.aes256 > FOO

--
Christian "naddy" Weisgerber naddy@mips.inka.de

No comments:

Post a Comment