Where is the salt on the OpenSSL AES encryption?
Yes, a transformation occurred: endianness...
Look at the bytes 8 to 15: 7ead 14f8 3192 3f2b
. That's your salt. It is a known quirk of od
: it decodes data by 16-bit units, little-endian, then shows them "numerically", so this incurs an apparent byte swap.
Use od -t x1
to get a nicer output.
Edit: to answer your other question, what OpenSSL does is neither standard nor common practice; it is just "what OpenSSL has always done". It is not well documented.