[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: OpenSSl encrpt and decrypt a String



Hi,

16 oct. 2020 à 15:58 de philipp.ewald@digionline.de:

> i try to encrypt a String with OpenSSL but its not working as i want.
>
> echo -n "That's the text" | openssl enc -aes-256-cbc -a -A -nosalt
>
I don't know if your question is just theoretical or if you have a valid use case beyond the base64 "issue", but please note that CBC mode is  probably not what you want if you are looking for security (see padding oracle attacks).

Some pointers:
* https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation
* https://blog.cloudflare.com/padding-oracles-and-the-decline-of-cbc-mode-ciphersuites/
* https://robertheaton.com/2013/07/29/padding-oracle-attack/

Best regards,
l0f4r0


Reply to: