Linked Questions

8 votes
3 answers
9k views

I've been using this command to encrypt files for a while now: openssl aes-256-cbc -a -salt -in secrets.txt -out secrets.txt.enc Then I type in a password. Can someone tell me, roughly speaking, how ...
user21203's user avatar
  • 273
7 votes
2 answers
11k views

While researching how to encrypt private keys for SSH connections as securely as possible, I have run into the following very basic understanding problems (Note: I have used the newest stable release ...
Binarus's user avatar
  • 609
7 votes
2 answers
9k views

Wikipedia states that md5's collision resistance is 2^18 (https://en.wikipedia.org/wiki/MD5). I just found out that openssl enc uses md5 to hash the password and the salt. Let's assume that I want ...
randor's user avatar
  • 155
4 votes
2 answers
14k views

I'm using OpenSSL's des3 tool to encrypt a file, e.g. openssl des3 -salt -k SUPER_SECURE_PASSPHRASE < inputFile > outputFile Everything's working, but now I have to choose a final, fixed ...
Daniel Griscom's user avatar
7 votes
1 answer
3k views

This answer on another question on security stackexchange by a very reputed user explains why he prefers GnuPG over OpenSSL for file encryption. From what I understand, it can be summarized as this: ...
Gradient's user avatar
  • 225
2 votes
1 answer
4k views

So I followed openssl: recover key and IV by passphrase and managed to retrieve my salt, key and IV using -P in openssl. openssl enc -aes-256-cbc -in encrypted -pass "pass:password" -out m.jpg this ...
Archy Will He's user avatar
5 votes
1 answer
6k views

I'm trying to find out which encryption method is used by a piece of software I use, viz. the 'Cloud Sync' feature of Synology's DSM 6.0 running on a Synology NAS. (Background. This Cloud Sync ...
MarnixKlooster ReinstateMonica's user avatar
4 votes
1 answer
3k views

I'm a freshmen in cryptography and want to know more about IV reversing. There's a lot of posts about finding the passphrase with a new IV. But what about the other situation? This is for educational ...
Platonium's user avatar
5 votes
1 answer
789 views

Let's consider this openssl command : openssl enc -aes-256-cbc -pass pass:PASSWORD Why is it important to have a good Key Derivation Function? This answer to another question suggest that GnuPG is ...
Gradient's user avatar
  • 225
1 vote
1 answer
2k views

I'm using openssl for a project and came across two options: -k passphrase and -K raw_key (hex). What's the difference between the two options? I've been attempting to port something from openssl to ...
crypto_help123's user avatar
0 votes
0 answers
2k views

Am learning OpenSSL EVP API and trying to understand the ways to generate a symmetric key using OpenSSL EVP in C++ program. I have two questions in this regard: 1) To understand what the command ...
kee's user avatar
  • 11
0 votes
1 answer
1k views

I try to really securely encrypt a file with OpenSSL. I´m new to OpenSSL and just read here, that it´s not very secure due to it´s behavior in generating salt & IV, and storing it within the ...
user3475261's user avatar
1 vote
1 answer
670 views

Reading other posts like this one give me the impression that the iv can be retrieved from an openssl enc output, and indeed, I see that under one circumstance, it works: # These two commands print ...
Jellicle's user avatar
  • 231
0 votes
0 answers
702 views

I'm trying to encrypt a string like this: echo "hey" | openssl enc -aes-256-cbc-hmac-sha1 -md sha256 -pass pass:foo -base64 But word on the street is that older versions of openssl are not ...
bendytree's user avatar
  • 303
0 votes
0 answers
464 views

Sorry for the naive question. I wonder how DigitalOcean Spaces (S3 compatible) fits personal backups. I found a lot of information about security of Amazon S3 and its security is undoubted, however, ...
com's user avatar
  • 101