AES CBC Encryption

NetShield supports AES CBC encryption, using the OpenSSL implementation. NetShield currently only supports 128-bit and 256-bit AES CBC encryption. AES CBC requires both the encrypting, as well as decrypting party to use the same key and IV. The key length must be the same number of bits as the cipher you have selected, and the IV should always be the size of a single block (128 bits). We also expect the key and IV in a BASE64 format.

info

For testing, you can use a key + IV generator like the one here. We don't recommend using such a generator for your production secrets.