Command-line encryption not compatible with openssl

[mgax]

I was trying to recover some encrypted backups and it turns out libressl and openssl can't decrypt each other's formats.

This works:

$ echo 'hello' | libressl aes-256-cbc -pass pass:foo | libressl aes-256-cbc -d -pass pass:foo
hello

This doesn't:

$ echo 'hello' | openssl aes-256-cbc -pass pass:foo | libressl aes-256-cbc -d -pass pass:foo
bad decrypt
139721145175576:error:06FFF064:digital envelope routines:CRYPTO_internal:bad decrypt:evp/evp_enc.c:533:

Nor this:

$ echo 'hello' | libressl aes-256-cbc -pass pass:foo | openssl aes-256-cbc -d -pass pass:foo
bad decrypt
139941284783360:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:../crypto/evp/evp_enc.c:535:

Here are the versions I've tested with:

$ libressl version
LibreSSL 2.6.4
$ openssl version
OpenSSL 1.1.0f  25 May 2017

[kinichiro]

Hi,

On my CentOS7, those commands both succeeded.

# echo 'hello' | openssl aes-256-cbc -pass pass:foo | libressl aes-256-cbc -d -pass pass:foo
hello
# echo 'hello' | libressl aes-256-cbc -pass pass:foo | openssl aes-256-cbc -d -pass pass:foo
hello

My versions are below. OpenSSL version is 1.0.2.

# libressl version
LibreSSL 2.6.4
# openssl version
OpenSSL 1.0.2k-fips  26 Jan 2017

OpenSSL 1.1.0 appears to be changed the enc default hash from md5 to sha256.
https://www.openssl.org/docs/faq.html#USER3

Can you try these 2 commands ?

# echo 'hello' | openssl aes-256-cbc -pass pass:foo | libressl aes-256-cbc -d -pass pass:foo -md sha256

# echo 'hello' | libressl aes-256-cbc -pass pass:foo | openssl aes-256-cbc -d -pass pass:foo -md md5

[mgax]

@kinichiro, thanks for looking into this. Indeed both commands work:

$ echo 'hello' | openssl aes-256-cbc -pass pass:foo | libressl aes-256-cbc -d -pass pass:foo -md sha256
hello
$ echo 'hello' | libressl aes-256-cbc -pass pass:foo | openssl aes-256-cbc -d -pass pass:foo -md md5
hello

Mystery solved, I'll just close the issue.

[leonklingele]

OpenSSL 1.1.0 appears to be changed the enc default hash from md5 to sha256.

This should also be changed in LibreSSL?