[SOLVED] Openssl with -e -pbkdf2 does not work

czezz · 09-09-2022, 05:32 AM

It seems like openssl encryption with option "-e -pbkdf2" does not do the work. It simply encode the string with base64.

Code:

echo 'mysecretpassword' | openssl enc -base64 -e -pbkdf2 -pass pass:garbageKey
bXlzZWNyZXRwYXNzd29yZAo=

echo "bXlzZWNyZXRwYXNzd29yZAo=" | base64 -d
mysecretpassword

My openssl version: OpenSSL 1.1.1f 31 Mar 2020
What am I doing wrong here?

Note:
Back in a days with OpenSSL 1.0.x I was able encrypt string using "-e -aes-256-cfb" and that worked very well:

Code:

Encrypt:
echo 'mysecretpassword' | openssl enc -base64 -e -aes-256-cfb -nosalt  -pass pass:garbageKey
FHNEdyhPcJWL1CLWiersE6Y=

echo "FHNEdyhPcJWL1CLWiersE6Y=" | base64 -d
sDw(Op???":???

Decrypt:
echo 'FHNEdyhPcJWL1CLWiersE6Y=' | openssl enc -base64 -d -aes-256-cfb -nosalt -pass pass:garbageKey
mysecretpassword

Cheers
Czezz

boughtonp · 09-10-2022, 02:04 PM

What you're doing wrong is not reading the relevant man page, where there are examples:

Quote:

Originally Posted by man openssl-enc

Encrypt a file using AES-128 using a prompted password and PBKDF2 key derivation:

Code:

openssl enc -aes128 -pbkdf2 -in file.txt -out file.aes128

Decrypt a file using a supplied password:

Code:

openssl enc -aes128 -pbkdf2 -d -in file.aes128 -out file.txt \
    -pass pass:<password>

Encrypt a file then base64 encode it (so it can be sent via mail for example) using AES-256 in CTR mode and PBKDF2 key derivation:

Code:

openssl enc -aes-256-ctr -pbkdf2 -a -in file.txt -out file.aes256

Base64 decode a file then decrypt it using a password supplied in a file:

Code:

openssl enc -aes-256-ctr -pbkdf2 -d -a -in file.aes256 -out file.txt \
    -pass file:<passfile>

czezz · 09-11-2022, 02:58 AM

Thank you boughtonp.
Here is working example. Maybe it will help to someone else

Code:

encrypt:
echo 'mysecretpassword' | openssl enc -base64 -aes-256-ctr -pbkdf2 -nosalt -pass pass:garbageKey
bqmTCzEh9G8QFOsRC9e6wGE=

decrypt:
echo 'bqmTCzEh9G8QFOsRC9e6wGE=' | openssl enc -base64 -d -aes-256-ctr -pbkdf2 -nosalt -pass pass:garbageKey