search

Devessier / ssl

Clone of openssl in C for 42 School
GNU General Public License v3.0
0 stars 0 forks source link

Output salt only when needed #27

Open Devessier opened 3 years ago

Devessier commented 3 years ago

In encryption mode, we should output the salt only if we generated the key. This mimics openssl behaviour. Try:

cat auteur | openssl enc -des-ecb -md sha256 -pbkdf2 -iter 10000 -K AABB09182736CCDD -S AABB09182736CCDD
# No salt outputed

cat auteur | openssl enc -des-ecb -md sha256 -pbkdf2 -iter 10000 -K AABB09182736CCDD
# No salt outputed

cat auteur | openssl enc -des-ecb -md sha256 -pbkdf2 -iter 10000 -S AABB09182736CCDD -pass 'pass:lol'
# Salt outputed
Devessier commented 3 years ago

As a consequence, we must not generate a salt if a key was directly provided.