Re: OpenSSl encrpt and decrypt a String

From	l0f4r0@tuta.io
Newsgroups	linux.debian.user
Subject	Re: OpenSSl encrpt and decrypt a String
Date	2020-10-16 22:40 +0200
Message-ID	<B0EG5-1py-7@gated-at.bofh.it> (permalink)
References	<B0yr0-60c-3@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

Hi,

16 oct. 2020 à 15:58 de philipp.ewald@digionline.de:

> i try to encrypt a String with OpenSSL but its not working as i want.
>
> echo -n "That's the text" | openssl enc -aes-256-cbc -a -A -nosalt
>
I don't know if your question is just theoretical or if you have a valid use case beyond the base64 "issue", but please note that CBC mode is  probably not what you want if you are looking for security (see padding oracle attacks).

Some pointers:
* https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation
* https://blog.cloudflare.com/padding-oracles-and-the-decline-of-cbc-mode-ciphersuites/
* https://robertheaton.com/2013/07/29/padding-oracle-attack/

Best regards,
l0f4r0

Back to linux.debian.user | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

OpenSSl encrpt and decrypt a String Philipp Ewald <philipp.ewald@digionline.de> - 2020-10-16 16:00 +0200
  Re: OpenSSl encrpt and decrypt a String Reco <recoverym4n@enotuniq.net> - 2020-10-16 18:20 +0200
    Re: OpenSSl encrpt and decrypt a String Philipp Ewald <philipp.ewald@digionline.de> - 2020-10-16 18:30 +0200
      Re: OpenSSl encrpt and decrypt a String Reco <recoverym4n@enotuniq.net> - 2020-10-16 19:40 +0200
  Re: OpenSSl encrpt and decrypt a String l0f4r0@tuta.io - 2020-10-16 22:40 +0200

csiph-web