Comment Comment by tptacek If you mean the OpenSSL CLI, it's hard to think of a more footgun-y cryptographic tool than the one that:* defaults to unauthenticated encryption* buries its one authenticated mode* requires explicit command-line nonces* defaults to an MD5 KDFYou could probably keep going for another 10 bullets. Never use the OpenSSL CLI for anything other than TLS stuff. parent tptacek 10 months ago
* defaults to unauthenticated encryption
* buries its one authenticated mode
* requires explicit command-line nonces
* defaults to an MD5 KDF
You could probably keep going for another 10 bullets. Never use the OpenSSL CLI for anything other than TLS stuff.