How to do encryption using AES in Openssl

Question

I am trying to write a sample program to do AES encryption using Openssl. I tried going through Openssl documentation( it's a pain), could not figure out much. I went through the code and found the API's using which i wrote a small program as below (please omit the line numbers). I don't see any encryption happening... am i missing something?

PS: I don't get any errors upon compilation.

  1 #include <stdio.h>    2 #include <openssl/aes.h>      3    4 static const unsigned char key[] = {   5   0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,   6     0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff,   7       0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,   8         0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f   9         };  10   11 void main()  12 {  13     unsigned char text[]="virident";  14     unsigned char out[10];   15     unsigned char decout[10];  16   17     AES_KEY wctx;  18   19     AES_set_encrypt_key(key, 128, &wctx);  20     AES_encrypt(text, out, &wctx);    21   22     printf("encryp data = %s\n", out);  23       24     AES_decrypt(out, decout, &wctx);  25     printf(" Decrypted o/p: %s \n", decout);  26   27   28 } 

Please help me to figure this out...

Answer 1

Check out this link it has a example code to encrypt/decrypt data using AES256CBC using EVP API.

https://github.com/saju/misc/blob/master/misc/openssl_aes.c

Also you can check the use of AES256 CBC in a detailed open source project developed by me at https://github.com/llubu/mpro

The code is detailed enough with comments and if you still need much explanation about the API itself i suggest check out this book Network Security with OpenSSL by Viega/Messier/Chandra (google it you will easily find a pdf of this..) read chapter 6 which is specific to symmetric ciphers using EVP API.. This helped me a lot actually understanding the reasons behind using various functions and structures of EVP.

and if you want to dive deep into the Openssl crypto library, i suggest download the code from the openssl website (the version installed on your machine) and then look in the implementation of EVP and aeh api implementation.

One more suggestion from the code you posted above i see you are using the api from aes.h instead use EVP. Check out the reason for doing this here OpenSSL using EVP vs. algorithm API for symmetric crypto nicely explained by Daniel in one of the question asked by me..