Well thanks, that explanation was useful :)

i completed my little essay about openssl (user manual and data format)
i've posted it here
http://www.scribd.com/doc/915895/OpenSSL-User-Manual-and-Data-Format
actually it is quite basic and deals only with digests and symmetric encryption
however I hope it might be useful to someone here all the same :)

if you find some errors or wrong phrases please report them to me and
i'll try to correct them as soon as possible
thank you
Vittorio

2007/12/17, Dr. Stephen Henson <[EMAIL PROTECTED]>:
> On Mon, Dec 17, 2007, Vittorio Giovara wrote:
>
> > hi!
> > I was encoding some files with the -salt option specified and passing
> > the key and iv from command line
> >
> > $ openssl enc -des3 -in test.txt -out test.des3 -salt -K 12345 -iv 12345
> >
> > but then i tested the program with the -nosalt option selected, and
> > the files in the two cases where the same
> > as a matter of fact the encoded salted file doesn't even contain the
> > "Salted__" string
> >
> > then if i remove the -K and -iv options and let program derive the key
> > and iv from password the file is actually salted
> >
> > is this normal behaviour or is it a bug of the program?
> > thanks for the attention
>
> Well arguably using -salt with -K and -iv is inconsistent so it should produce
> and error.
>
> The key and IV are derived from the passphrase and salt so when you supply a
> key and IV explicitly the salt is not used.
>
> Steve.
> --
> Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
> OpenSSL project core developer and freelance consultant.
> Funding needed! Details on homepage.
> Homepage: http://www.drh-consultancy.demon.co.uk
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    openssl-users@openssl.org
> Automated List Manager                           [EMAIL PROTECTED]
>
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to