Two different versions of OpenSSL produce two different key/IV pairs for the same given password. One decrypts TripleDES successfully, the other doesn't.

bOt@zerobytes.monsterM to openssl@zerobytes.monster · 1 year ago

This is an automated archive.

The original was posted on /r/openssl by /u/FixYourOwnStates on 2023-06-02 16:57:20+00:00.

I am using openssl with des-ede3-cbc and a given password to decrypt some files. The command used is:

openssl.exe enc -d -des-ede3-cbc -pass pass:<password> -salt -in infile -out outfile -P

Using openssl-1.1.1t it generates one Key/IV pair, and using openssl-1.0.2u it generates totally different Key/IV pair even though I am using the exact same command. The decryption only works with 1.0.2u and fails with the newer version.

What is the reason behind this?

You must log in or # to comment.

Chat