How to use OpenSSL to encrypt/decrypt files?

OpenSSL is a powerful tool for encrypting and decrypting files to ensure data security. Below, I will provide a step-by-step guide on how to use OpenSSL for encrypting and decrypting files.

Encrypting Files

1. Select an appropriate encryption algorithm: Choose a suitable encryption algorithm, such as AES-256. AES is a widely adopted encryption standard that provides strong security.

2. Generate a key: You can generate a random key using OpenSSL, which will be used for encrypting the file. For example, to generate a 256-bit AES key, use the following command:

   bash
   openssl rand -out key.bin 32

   Here, 32 specifies generating a 32-byte (256-bit) key.

3. Encrypt the file: Now, you can use the previously generated key to encrypt the file. For instance, to encrypt a file named example.txt, use the following command:

   bash
   openssl enc -aes-256-cbc -salt -in example.txt -out example.enc -pass file:./key.bin

   Here, -aes-256-cbc specifies using AES-256 in CBC mode for encryption, and -salt enhances the encryption strength.

Decrypting Files

1. Decrypt using the same key: After encrypting the file, you can decrypt it using the same key. Use the following command to decrypt the file:

   bash
   openssl enc -d -aes-256-cbc -in example.enc -out example_decrypted.txt -pass file:./key.bin

   Here, -d instructs OpenSSL to perform decryption.

Example

Suppose we have an important document important.docx that needs to be encrypted for transmission to a remote team. First, generate a key:

bash
openssl rand -out secret.key 32

Then, encrypt the document using this key:

bash
openssl enc -aes-256-cbc -salt -in important.docx -out important.docx.enc -pass file:./secret.key

Send the encrypted file important.docx.enc and the key secret.key (securely) to the remote team. Upon receiving the file, they can decrypt it using the same key:

bash
openssl enc -d -aes-256-cbc -in important.docx.enc -out important_decrypted.docx -pass file:./secret.key

This example demonstrates how to securely use OpenSSL for encrypting and decrypting files to protect data during transmission.