Encrypted openssl aes-256 macOS Monterey cannot be decrypted with Ventura aes-256

[jkeller13]

If you are using a decrypt string like the one below, you will encounter an error on macOS Ventura when attempting to decrypt. See below:

#!bin/bash

## Decrypt string using salt and phrase.
function DecryptString() {
echo "${1}" | openssl enc -aes256 -d -a -A -S "${2}" -k "${3}"
}

bad decrypt

4370875948:error:06FFF064:digital envelope routines:CRYPTO_internal:bad decrypt:/AppleInternal/Library/BuildRoots/a0876c02-1788-11ed-b9c4-96898e02b808/Library/Caches/com.apple.xbs/Sources/libressl/libressl-2.8/crypto/evp/evp_enc.c:521:

SOLUTION:

You will need to add "-md md5" to your enc string. This will work across macOS versions 13 back through at least 10.12.

#!bin/bash

## Decrypt string using salt and phrase.
function DecryptString() {
echo "${1}" | openssl enc -md md5 -aes256 -d -a -A -S "${2}" -k "${3}"
}

[AJPinto]

I have just been redoing the encrypt and updating the decrypt, I'm just lazy and did not feel like researching. Very good information. 

For those who pass passwords in plaintext in scripts. Save this and start encrypting your passwords.

[catalana]

Thank you for this info.  This was my resolution to my issue/problem.

[rcoleman]

Just bumped into this issue. Many thanks for solution.

[bradtchapman]

This post is still the gift that keeps on giving.

[debrat]

Thank you very much! Helped us avoid extra steps on thousands of computers while keeping the information encrypted :) 👍