OpenSSL salted format - Revision history

Jsummers at 20:14, 29 January 2016

2016-01-29T20:14:03Z

Jsummers: /* Format */

2013-06-29T21:44:34Z

‎Format

Jsummers: Created page with "{{FormatInfo |subcat=Encryption }} '''OpenSSL salted format''' is our name for the file format ''OpenSSL'' usually uses when writing password-protected encrypted files. == Fo..."

2013-06-01T01:04:06Z

Created page with "{{FormatInfo |subcat=Encryption }} '''OpenSSL salted format''' is our name for the file format ''OpenSSL'' usually uses when writing password-protected encrypted files. == Fo..."

New page

{{FormatInfo
|subcat=Encryption
}}
'''OpenSSL salted format''' is our name for the file format ''OpenSSL'' usually uses when writing password-protected encrypted files.

== Format ==
Files have an 8-byte signature, followed by an 8-byte salt. Following the salt is the encrypted data.

The salt and password are to be combined in a particular way, to derive the encryption key and initialization vector.

No information about which encryption cipher was used is stored in the file. In order to decrypt the file, the cipher must be known by external means, or guessed. (Obviously, the same goes for the password.)

== Identification ==
Files begin with an 8-byte signature: the ASCII characters "<code>Salted__</code>".

== Example ==
To encrypt a file:
$ openssl aes-128-cbc -in secret.txt -out secret.txt.enc

To decrypt:
$ openssl aes-128-cbc -d -in secret.txt.enc -out secret2.txt

== Software ==
* [http://www.openssl.org/ OpenSSL]

@@ Line 2: / Line 2: @@
 |subcat=Encryption
 }}
-'''OpenSSL salted format''' is our name for the file format ''OpenSSL'' usually uses when writing password-protected encrypted files.
+'''OpenSSL salted format''' is our name for the file format [[OpenSSL]] usually uses when writing password-protected encrypted files.
 == Format ==
@@ Line 22: / Line 22: @@
 == Software ==
-* [http://www.openssl.org/ OpenSSL]
+* [[OpenSSL]]

@@ Line 5: / Line 5: @@
 == Format ==
-Files have an 8-byte signature, followed by an 8-byte salt. Following the salt is the encrypted data.
+Files have an 8-byte signature, followed by an 8(?)-byte salt. Following the salt is the encrypted data.
 The salt and password are to be combined in a particular way, to derive the encryption key and initialization vector.