Security Warning: AES-256-CBC does not provide authenticated encryption and is vulnerable to padding oracle attacks. You should use something like age instead. Encrypt: openssl aes-256-cbc -a -salt -pbkdf2 -in secrets.txt -out secrets.txt.enc Decrypt: openssl aes-256-cbc -d -a -pbkdf2 -in secrets.txt.enc -out secrets.txt.new More details on the various flags
When encrypting, you use their public key to write a message and they use their private key to read it. When signing, you use your private key to write message’s signature, and they use your public key to check if it’s really yours. I want to use my private key to generate messages so only … Read more
Please consider long and hard if you can’t get around implementing your own cryptography The ugly truth of the matter is that if you are asking this question you will probably not be able to design and implement a secure system. Let me illustrate my point: Imagine you are building a web application and you … Read more