Forum Discussion

Nacreous

Sep 03, 2010

AES::encrypt - can decrypt function be carried out elsewhere?

If the F5 has used AES ecryption to encrypt a string via AES::encrypt, can the key be exported and used on another downstream device to decrypt? This downstream device could be a) another...

Nimbostratus

Sep 07, 2010

As Hamish said, this is possible, as long as you use a hardcoded key. Do not use [AES::key] command, as this generates a random key and the same key must be used to encrypt or decrypt. This is due to AES being a symmetric key encryption algorithm, meaning both sides need to use a shared key.

DeVon

patonbike
Cirrus
Sep 17, 2020
Does anyone know the syntax to decrypt data on say, a linux machine with openssl command? I am trying to do this as a proof of concept. Obviously we are using a pre shared key.
What cipher is it?
This does NOT work:

openssl aes-256-ecb -d -K MY_AES_256_KEY_HERE base64 -in MY_F5_Base64_encoded_aes256_string_here.txt -debug