On Wed, Dec 4, 2019 at 1:05 PM Dieter Rauschenberger <[email protected]> wrote: > > i have encrypted several documents with > > openssl enc -aes-256-cbc -e < FOO > FOO.aes256 > > This was serveral years ago before Libressl was invented. Now I wanted > to decrypt the docs with: > > openssl enc -aes-256-cbc -d < FOO.aes256 > FOO > > This did not work. The password did not work anymore. I had to install > openssl-1.0.2t via packages. This works: > > eopenssl enc -aes-256-cbc -d < FOO.aes256 > FOO > > My password is accepted. The document appeared in plaintext. > Is there a trick to do this with libressl from base?
OpenSSL changed the hash used in the key derivation function sometime around OpenSSL 1.0.2. Formerly is was MD5. I believe it was changed to SHA256. I believe the command line option to changed the derivation hash is -md. You might try adding -md md5 or -md sha1. Jeff
