How to use OpenSSL to encrypt/decrypt files?

Security Warning: AES-256-CBC does not provide authenticated encryption and is vulnerable to padding oracle attacks. You should use something like age instead.

Encrypt:

openssl aes-256-cbc -a -salt -pbkdf2 -in secrets.txt -out secrets.txt.enc

Decrypt:

openssl aes-256-cbc -d -a -pbkdf2 -in secrets.txt.enc -out secrets.txt.new

More details on the various flags

Related Posts:

  1. How to encrypt String in Java
  2. Encrypt with private key and decrypt with public key
  3. RSA Public Key format
  4. I have a keypair. How do I determine the key length?
  5. Ask: Anonymization Data of live WordPress site
  6. How to install OpenSSL in windows 10?
  7. Is it possible to decrypt MD5 hashes?
  8. AES Decryption in Python when IV and Value provided separately
  9. SSL Error: unable to get local issuer certificate
  10. curl: (60) SSL certificate problem: unable to get local issuer certificate
  11. curl: (60) SSL certificate problem: unable to get local issuer certificate
  12. Chrome not Firefox are not dumping to SSLKEYLOGFILE variable
  13. Chrome not Firefox are not dumping to SSLKEYLOGFILE variable
  14. Openssl : error “self signed certificate in certificate chain”
  15. File extension .DB – What kind of database is it exactly?
  16. Given final block not properly padded
  17. How to generate a self-signed SSL certificate using OpenSSL?
  18. mcrypt is deprecated, what is the alternative?
  19. SSL_read failing with SSL_ERROR_SYSCALL error
  20. Converting pfx to pem using openssl
  21. OpenSSL Verify return code: 20 (unable to get local issuer certificate)
  22. Python AttributeError: ‘module’ object has no attribute ‘SSL_ST_INIT’
  23. Verify return code: 20 when testing OpenSSL
  24. Simplest two-way encryption using PHP
  25. what is meant by devel for openssl?
  26. How can I list the available Cipher algorithms?
  27. Encrypt & Decrypt using PyCrypto AES 256
  28. Using OpenSSL what does “unable to write ‘random state'” mean?
  29. Encrypt Password in Configuration Files?
  30. Encrypt Password in Configuration Files?
  31. OpenSSL: PEM routines:PEM_read_bio:no start line:pem_lib.c:703:Expecting: TRUSTED CERTIFICATE
  32. SSL error SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
  33. Converting PKCS#12 certificate into PEM using OpenSSL
  34. curl : (1) Protocol https not supported or disabled in libcurl
  35. OpenSSL: unable to verify the first certificate for Experian URL
  36. SSL CA cert (path? access rights?)
  37. ‘openssl’ is not recognized as internal or external command
  38. cat not recognised as an internal or external command
  39. gpg decryption fails with no secret key error
  40. RSA encryption and decryption in Python
  41. Enter PEM pass phrase when converting PKCS#12 certificate into PEM
  42. Getting error in Curl – Peer certificate cannot be authenticated with known CA certificates
  43. How do you sign a Certificate Signing Request with your Certification Authority?
  44. How to fix: fatal error: openssl/opensslv.h: No such file or directory in RedHat 7
  45. Is there any difference between aes-128-cbc and aes-128 encryption?
  46. JavaScript string encryption and decryption?
  47. How to fix SSL issue SSL_CTX_use_certificate : ca md too weak on Python Zeep
  48. How to install latest version of openssl Mac OS X El Capitan
  49. What is the easiest way to encrypt a password when I save it to the registry?
  50. Encrypt and decrypt a string in C#?
  51. How to store username and password to API in wordpress option DB?
  52. How WordPress encrypt password? [duplicate]
  53. Are the default salts secure?
  54. How to validate WordPress generated password in DB using PHP?
  55. Security in WordPress plugin development
  56. Encrypt emails?
  57. Store and Encrypt Contact Form 7 Submissions in Database? [closed]
  58. Can I edit the wp_post > post_content right before its inserted/updated?
  59. PGP-Encrypt system-generated notifications
  60. CNAME site attempts to load files over HTTP instead of HTTPS
  61. Sniffing wordpress user’s credentials
  62. Moving away from MD5: Where to declare the custom global $wp_hasher?
  63. wp_hash_password create a different hash everytime
  64. Display encrypted content on my website
  65. Parse form values before sending to options.php
  66. Auto login subdomain from main domain on single sites with different DB
  67. Using an Encryption class in a WordPress Plugin
  68. Pass MD5 value to prepopulate field
  69. Is the login encrypted before it is sent? If so how to do I encrypt it the same way?
  70. Apply function to update_option Variable
  71. Detect change in site_url and home_url
  72. Protect Post Permalink From Copy
  73. How to store API authentication password?
  74. Decode and Decrypt Azure B2C OpenID Authorization Token, Use Response in API Call (Example Token Within)
  75. how to handle premium features in a wordpress plugin?
  76. Not able to log for the first time on a salted WordPress by creating pwd on BD
  77. Encrypt API key [duplicate]
  78. Retrieve $_POST data to send to javascript without using localize script
  79. I want to encrypt my WordPress plugin
  80. How WordPress hashes passwords
  81. How to get real password (before encrypt) when register a user?
  82. Why can’t I save encrypted data in a transient?
  83. Create a public SSH key from the private key?
  84. how to download the ssl certificate from a website?
  85. Heartbleed: What is it and what are options to mitigate it?
  86. How do I view the details of a digital certificate .cer file?
  87. How to view all ssl certificates in a bundle?
  88. Is it possible to generate RSA key without pass phrase?
  89. ssh-keygen does not create RSA private key
  90. How can I verify if TLS 1.2 is supported on a remote web server from the RHEL/CentOS shell?
  91. Certification authority root certificate expiry and renewal
  92. Heartbleed: how to reliably and portably check the OpenSSL version?
  93. Best location to keep SSL certificates and private keys on Ubuntu servers?
  94. Generating a self-signed cert with openssl that works in Chrome 58
  95. How to Deobfuscate a sourcecop protected WordPress plugin?
  96. Making a user platform reachable by a qr code on a pin-back-button [closed]

Leave a Comment