OPENSSL-ENC(1ssl) OpenSSL OPENSSL-ENC(1ssl) (NAME) openssl-enc - (SYNOPSIS) openssl enc|cipher [-cipher] [-help] [-list] [-ciphers] [-in filename] [-out filename] [-pass arg] [-e] [-d] [-a] [-base64] [-A] [-k password] [-kfile filename] [-K key] [-iv IV] [-S salt] [-salt] [-nosalt] [-z] [-md digest] [-iter count] [-pbkdf2] [-saltlen size] [-p] [-P] [-bufsize number] [-nopad] [-v] [-debug] [-none] [-skeymgmt skeymgmt] [-skeyopt opt:value] [-engine id] [-rand files] [-writerand file] [-provider name] [-provider-path path] [-provparam [name:]key=value] [-propquery propq] openssl cipher [...] (DESCRIPTION) . Base64 . (OPTIONS) -cipher . -help . -list . -ciphers -list . -in filename . -out filename . -pass arg . arg openssl-passphrase-options(1) . -e . -d . -a Base64. Base64 . Base64 . -A . -base64 -a -A -a Base64 Base64 . -A . -k password . OpenSSL . -pass . -kfile filename filename. OpenSSL . -pass . -md digest . sha-256 . -iter count . . PBKDF2 . -pbkdf2 PBKDF2 -iter . -saltlen (salt) -pbkdf2. . . -pbkdf2 . . -nosalt . OpenSSL. -salt ( -S) . -S salt : . . ( -saltlen ). -K key : . IV -iv . -K IV . . -iv IV IV : . -K IV . IV . -p IV . -P IV : . -bufsize number I/O. -nopad . -v (verbose) I/O . -debug BIO I/O. -z zlib . OpenSSL zlib zlib-dynamic . -none NULL ( ). -skeymgmt skeymgmt . EVP_SKEYMGMT . . "openssl list -skey-managers" . -skeyopt opt:value opt:value . . -rand files, -writerand file << >> openssl(1) . -provider name -provider-path path -provparam [name:]key=value -propquery propq << >> openssl(1) provider(7) property(7) . -engine id << >> openssl(1) . . (NOTES) "openssl cipher" "openssl enc -cipher" . (engine) ENGINE . openssl-list(1) . ( ccgost gost89 ) . -engine OpenSSL . enc . IV . -salt OpenSSL . -salt . . ( -S ) . . AES CBC . PKCS#7 . . . . RC2 . Blowfish RC5 . OpenSSL 3.0 -S . . -S . OpenSSL 3.0 OpenSSL 1.1.1 -S . OpenSSL 1.1.1 -S . (SUPPORTED CIPHERS) . -list ( "openssl enc -list") OpenSSL . CCM GCM . ( -out ) . (pipeline) (roll back) . AEAD key/iv/nonce openssl enc key/iv/nonce AEAD . key/iv/nonce . openssl-cms(1) key/iv/nonce . enc (key wrapping) . ( -bufsize 8*1024 ) . '*-wrap' . '*-wrap-pad' . IV . . base64 Base 64 bf-cbc Blowfish in CBC mode bf Alias for bf-cbc blowfish Alias for bf-cbc bf-cfb Blowfish in CFB mode bf-ecb Blowfish in ECB mode bf-ofb Blowfish in OFB mode cast-cbc CAST in CBC mode cast Alias for cast-cbc cast5-cbc CAST5 in CBC mode cast5-cfb CAST5 in CFB mode cast5-ecb CAST5 in ECB mode cast5-ofb CAST5 in OFB mode chacha20 ChaCha20 algorithm des-cbc DES in CBC mode des Alias for des-cbc des-cfb DES in CFB mode des-ofb DES in OFB mode des-ecb DES in ECB mode des-ede-cbc Two key triple DES EDE in CBC mode des-ede Two key triple DES EDE in ECB mode des-ede-cfb Two key triple DES EDE in CFB mode des-ede-ofb Two key triple DES EDE in OFB mode des-ede3-cbc Three key triple DES EDE in CBC mode des-ede3 Three key triple DES EDE in ECB mode des3 Alias for des-ede3-cbc des-ede3-cfb Three key triple DES EDE CFB mode des-ede3-ofb Three key triple DES EDE in OFB mode desx DESX algorithm. gost89 GOST 28147-89 in CFB mode (provided by ccgost engine) gost89-cnt GOST 28147-89 in CNT mode (provided by ccgost engine) idea-cbc IDEA algorithm in CBC mode idea same as idea-cbc idea-cfb IDEA in CFB mode idea-ecb IDEA in ECB mode idea-ofb IDEA in OFB mode rc2-cbc 128 bit RC2 in CBC mode rc2 Alias for rc2-cbc rc2-cfb 128 bit RC2 in CFB mode rc2-ecb 128 bit RC2 in ECB mode rc2-ofb 128 bit RC2 in OFB mode rc2-64-cbc 64 bit RC2 in CBC mode rc2-40-cbc 40 bit RC2 in CBC mode rc4 128 bit RC4 rc4-64 64 bit RC4 rc4-40 40 bit RC4 rc5-cbc RC5 cipher in CBC mode rc5 Alias for rc5-cbc rc5-cfb RC5 cipher in CFB mode rc5-ecb RC5 cipher in ECB mode rc5-ofb RC5 cipher in OFB mode seed-cbc SEED cipher in CBC mode seed Alias for seed-cbc seed-cfb SEED cipher in CFB mode seed-ecb SEED cipher in ECB mode seed-ofb SEED cipher in OFB mode sm4-cbc SM4 cipher in CBC mode sm4 Alias for sm4-cbc sm4-cfb SM4 cipher in CFB mode sm4-ctr SM4 cipher in CTR mode sm4-ecb SM4 cipher in ECB mode sm4-ofb SM4 cipher in OFB mode aes-[128|192|256]-cbc 128/192/256 bit AES in CBC mode aes[128|192|256] Alias for aes-[128|192|256]-cbc aes-[128|192|256]-cfb 128/192/256 bit AES in 128 bit CFB mode aes-[128|192|256]-cfb1 128/192/256 bit AES in 1 bit CFB mode aes-[128|192|256]-cfb8 128/192/256 bit AES in 8 bit CFB mode aes-[128|192|256]-ctr 128/192/256 bit AES in CTR mode aes-[128|192|256]-ecb 128/192/256 bit AES in ECB mode aes-[128|192|256]-ofb 128/192/256 bit AES in OFB mode aes-[128|192|256]-wrap key wrapping using 128/192/256 bit AES aes-[128|192|256]-wrap-pad key wrapping with padding using 128/192/256 bit AES aria-[128|192|256]-cbc 128/192/256 bit ARIA in CBC mode aria[128|192|256] Alias for aria-[128|192|256]-cbc aria-[128|192|256]-cfb 128/192/256 bit ARIA in 128 bit CFB mode aria-[128|192|256]-cfb1 128/192/256 bit ARIA in 1 bit CFB mode aria-[128|192|256]-cfb8 128/192/256 bit ARIA in 8 bit CFB mode aria-[128|192|256]-ctr 128/192/256 bit ARIA in CTR mode aria-[128|192|256]-ecb 128/192/256 bit ARIA in ECB mode aria-[128|192|256]-ofb 128/192/256 bit ARIA in OFB mode camellia-[128|192|256]-cbc 128/192/256 bit Camellia in CBC mode camellia[128|192|256] Alias for camellia-[128|192|256]-cbc camellia-[128|192|256]-cfb 128/192/256 bit Camellia in 128 bit CFB mode camellia-[128|192|256]-cfb1 128/192/256 bit Camellia in 1 bit CFB mode camellia-[128|192|256]-cfb8 128/192/256 bit Camellia in 8 bit CFB mode camellia-[128|192|256]-ctr 128/192/256 bit Camellia in CTR mode camellia-[128|192|256]-ecb 128/192/256 bit Camellia in ECB mode camellia-[128|192|256]-ofb 128/192/256 bit Camellia in OFB mode (EXAMPLES) Base64 : openssl base64 -in file.bin -out file.b64 : openssl base64 -d -in file.b64 -out file.bin AES-128 PBKDF2: openssl enc -aes128 -pbkdf2 -in file.txt -out file.aes128 : openssl enc -aes128 -pbkdf2 -d -in file.aes128 -out file.txt \ -pass pass: Base64 ( ) AES-256 CTR PBKDF2: openssl enc -aes-256-ctr -pbkdf2 -a -in file.txt -out file.aes256 Base64 : openssl enc -aes-256-ctr -pbkdf2 -d -a -in file.aes256 -out file.txt \ -pass file: AES: openssl enc -e -a -id-aes128-wrap-pad -K 000102030405060708090A0B0C0D0E0F -in file.bin or openssl aes128-wrap-pad -e -a -K 000102030405060708090A0B0C0D0E0F -in file.bin (BUGS) -A . base64 -A . openssl enc . RC2 RC4 . (SEE ALSO) openssl-list(1) EVP_SKEY(3) (HISTORY) OpenSSL 1.1.0 MD5 SHA256 . -list OpenSSL 1.1.1e . -ciphers -engine OpenSSL 3.0 . -saltlen OpenSSL 3.2 . -skeymgmt -skeyopt OpenSSL 3.5 . (COPYRIGHT) 2000-2025 The OpenSSL Project Authors . . Apache License 2.0 (<<>>) . . LICENSE . 3.6.4 2026-08-25 OPENSSL-ENC(1ssl)