Help, > The Openssl.org documentation states that “all block ciphers normally > use PKCS#5 padding”. This must be some mistake, PKCS#5 is for Password Base key Derivation Functions (PBKDF) - not for padding.
> The options > that I have in C# are ANSIX923,ISO10126,NONE,PKCS7,ZEROS. Is this my > problem. Can I change the > default padding in openssl. > Any code anyone has that can help me do this roundtrip between openssl > and C# would be appreciated. > Below are my scripts, the successfull decryption was done of course by > the openssl script not a C# program.. > > echo HELLO|openssl enc -a -salt -S 3031323334353637 -iv > 31464F4C4C455431 -des3 - > > K 31323334466F6C6C657426265472696D6461746131323334 -out > flnk_encrypt/grs_encrypt.txt Options -K/-iv are incompatible with -salt. Salt is parameter for PBKDF but if you specified -K/-iv this will not be used because you provided all parameters (key_block and initialization_vector) to start encrypting in CBC mode. > Encrypted and Encoded Packet following > > 2yjq5YMovrE= > Length Encrypted Packet = 13 12, new line does not counts :-) Pay attention that this packet is base64 format. You must de-base64 on PC side (should be 8 bytes) and than try to decrypt. Depending on decryption mode, key_block and initialization_vector may be provided as parameters or may be generated using PKCS#5 PBKDF with require passphrase, salt and iteration count. Check this. Best regards, -- Marek Marcola <[EMAIL PROTECTED]> ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]