TripleDES encryption using OpenSSL enc subcommand

Question

I have a tool which is using OpenSSL for RSA and DES/TDES operation. After processing by a tool, I got key = 4F324364970DBA5DE058EF0EAE54625E and the encrypted data is like data = D4B596A6724A32B4663965688F28E01C

Here when I try online tool DES_Calculator for decryption, got require plain text after decryption, what I found, need to try TDES with CBC mode.

I tried to do the same (decryption) with OpenSSL with following command:

 C:\OpenSSL-Win32\bin>openssl enc -d -des-ede-cbc -nosalt -k 4F324364970DBA5DE058
EF0EAE54625E -iv 0000000000000000 -in ENC_DATA -out ENC_DATA_O
bad decrypt
6088:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:.\
crypto\evp\evp_enc.c:529:

where content of ENC_DATA is like

Here I want the same result as from the online tool.

Also the same command is working fine after -e option performed on same set of files. Could anybody tell me why this error occurs and how to remove it?

Answer 1

Try -K instead of -k. -k is used for passphrases and -K for keys in hexadecimals. You'd probably not require the -nosalt option anymore.

You need to use -nopad and remove the bit padding yourself.

Bit padding consists of a single bit set to 1 followed by multiple bits set to 0. If the plaintext consists of bytes - it usually does - then bit padding is equal to a single byte 80 followed by zero or more 00 valued bytes.

Nowadays PKCS#7 compatible padding is usually used. OpenSSL is only able to remove PKCS#7 padding.