[openssl-dev] [openssl.org #4697] Bug in 1.1.0 (lost compatibility with previous releases)

[Sergey G Brazhnikov via RT]

Yes, Steve, you're right!
Thank you.

I'm sorry for imprecise wording.

Sergey.

2016-10-05 16:24 GMT+05:00 Stephen Henson via RT <rt at openssl.org>:

> On Wed Oct 05 07:05:06 2016, sgbrazhnikov at gmail.com wrote:
> > Hi, guys.
> >
> > Just figured out that files encrypted with OpenSSL 1.1.0-stable can not
> be
> > decrypted with previous releases and vice versa.
> > Tested aes256, cast5-cfb, camellia128 on 1.1.0-stable, 1.0.2-stable and
> > 0.9.8(cast5-cfb only)
> >
> > All built without errors, passed all tests.
> > Configuration VC-WIN32, os Windows 8.1 Pro x64, compiler vs2015.
> >
>
> In case you're referring to files encrypted using the "enc" utility this is
> because the default digest used for key derivation was changed from MD5 to
> SHA256 in OpenSSL 1.1.0.
>
> You can change this using the -md option. So supplying "-md md5" should
> retain
> compatibility.
>
> Steve.
> --
> Dr Stephen N. Henson. OpenSSL project core developer.
> Commercial tech support now available see: http://www.openssl.org
>
> --
> Ticket here: http://rt.openssl.org/Ticket/Display.html?id=4697
> Please log in as guest with password guest if prompted
>
>


-- 

С ув., Бражников С.

-- 
Ticket here: http://rt.openssl.org/Ticket/Display.html?id=4697
Please log in as guest with password guest if prompted