Linked Questions

13 votes
3 answers
4k views

Salting when encrypting?

I was attending a database encryption session at a developers conference. The presenter (who was a published author on the subject) said that MS SQL Server did not support salted hashes in the ...
Jim McKeeth's user avatar
8 votes
2 answers
11k views

What are KDF parameters in OpenSSL command-line utility for `enc`?

I refer to https://www.openssl.org/docs/manmaster/apps/enc.html and see that the only parameter for key derivation which I can set explicitly (not considering the obvious ...
A gee's user avatar
  • 83
3 votes
3 answers
1k views

Can I dynamically calculate an appropriate number of iterations for PBKDF2 based on the system time, rather than using a fixed value?

Could you choose the number of PBKDF2 iterations based upon the system time? I've heard a few people recommend that the number of iterations for PBKDF2 should be doubled every two years (starting with ...
ezzatron's user avatar
  • 133
5 votes
2 answers
2k views

Security of non-standard use for AES-256-CTR?

I have a string secret that I would like to encrypt for storage in a Yubikey's second slot. These slots can be configured to store up to 38 characters that are later "typed" by the USB device acting ...
lehrblogger's user avatar
1 vote
1 answer
2k views

Is there a difference between password and key?

I encrypt data with this command: openssl aes-256-cbc -a -salt -in C:\Users\User\secrets.txt -out C:\Users\User\secrets.txt.encs The program then asks that I... ...
Michael Hathe's user avatar
4 votes
1 answer
2k views

openssl encryption salt length

when i was reading the latest source code of openssl, i found openssl enc has an 8-byte (64-bit) salt length; because the same ...
Cyker's user avatar
  • 719
2 votes
1 answer
1k views

What is the encoding protocol for passphrase protected RSA private keys?

What is the protocol used to encode an RSA key protected with a passphrase? If I generate an RSA key with ssh-keygen -t rsa -b 4096 and do: ...
clay's user avatar
  • 165
1 vote
1 answer
2k views

AES-128-CBC padding size [closed]

I'm trying to figure out how padding works by seeing what happens when I try to encrypt a 16 byte file with AES-128-CBC. My understanding was if I encrypt a file of size, say, 28, then there would ...
Alyssa June's user avatar
0 votes
1 answer
780 views

AES Password Based Key Derivation Iterations

I have been writing my own implementation of the Advanced Encryption Standard with cipher block chaining in python3 for the last several months, mimicking the OpenSSL command line interface. I can ...
B345T's user avatar
  • 1
0 votes
0 answers
260 views

Old openssl version does not support -iter or -pbkdf2, how does it derive the encryption key for AES?

When using openssl or libressl to encrypt or decrypt data with AES, I typically specify ...
RocketNuts's user avatar
  • 1,397
0 votes
0 answers
88 views

OpenSSL BytesToKey() standalone in C

In evp.h, BytesToKey() generates the key from the passhphrase, IV and the MD5 digest in order to decrypt information used by the public/private keypair generation ...
jsmith2001's user avatar
1 vote
0 answers
81 views

How to encrypt a text file in a portable manner based solely on a password?

I used to use openssl aes-256-cbc, but the problem I have with this is when I try to decrypt in a different version of the distro it fails, as if it depends also on some internal key or something, ...
ChocoDeveloper's user avatar