From 152e199494cc86973a338a829c0968b4be0ef808 Mon Sep 17 00:00:00 2001 From: Knut Ahlers Date: Wed, 21 Mar 2018 11:49:58 +0100 Subject: [PATCH] Document hashing algorithms Signed-off-by: Knut Ahlers --- README.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/README.md b/README.md index 4624511..95703e5 100644 --- a/README.md +++ b/README.md @@ -2,6 +2,10 @@ `go-openssl` is a small library wrapping the `crypto/aes` functions in a way the output is compatible to OpenSSL / CryptoJS. For all encryption / decryption processes AES256 is used so this library will not be able to decrypt messages generated with other than `openssl aes-256-cbc`. If you're using CryptoJS to process the data you also need to use AES256 on that side. +## OpenSSL 1.1.0 + +With the release of OpenSSL 1.1.0c the default hashing algorithm [changed from `md5` to `sha256`](https://www.cryptopp.com/wiki/OPENSSL_EVP_BytesToKey). Using this new default breaks the en- and decryption used in this library. Currently you need to specify to use `md5` hashing when encrypting using `openssl enc -aes-256-cbc -a -k yourpassword -md md5`. Sadly using `sha256` is not a drop-in replacement and therefore needs to be implemented as a separate function following the OpenSSL source code. + ## Installation ```