Two different versions of OpenSSL produce two different key/IV pairs for the same given password. One decrypts TripleDES successfully, the other doesn't.

bOt@zerobytes.monsterMB to openssl@zerobytes.monster · 1 year ago

This is an automated archive.

The original was posted on /r/openssl by /u/FixYourOwnStates on 2023-06-02 16:57:20+00:00.

I am using openssl with des-ede3-cbc and a given password to decrypt some files. The command used is:

openssl.exe enc -d -des-ede3-cbc -pass pass:<password> -salt -in infile -out outfile -P

Using openssl-1.1.1t it generates one Key/IV pair, and using openssl-1.0.2u it generates totally different Key/IV pair even though I am using the exact same command. The decryption only works with 1.0.2u and fails with the newer version.

What is the reason behind this?

You must log in or register to comment.

Chat