Camellia Encryption & Decryption

Encrypt and decrypt text with Camellia-128, 192 or 256.

Text to encrypt

Encrypt with

Password

You'll need it again to decrypt. Nothing you type leaves this page.

PBKDF2 iterations

OpenSSL's default is 10,000. Any number works: more makes the password slower to guess; decrypting needs the same number.

Mode

The usual choice with OpenSSL. Needs an IV; pads to whole blocks.

Key size

Output as

Same with OpenSSL

openssl enc -camellia-256-cbc -pbkdf2 -iter 10000 -a -A

OpenSSL asks for the password; paste the text into it, or add -in and -out files.

Encrypted text

Camellia is a block cipher from Mitsubishi Electric and NTT with the same 16-byte block and 128-, 192- or 256-bit keys as AES, and a comparable security level. It is an ISO/IEC standard, was selected by the European NESSIE project and Japan's CRYPTREC, and is built into OpenSSL — so everything this page encrypts can also be read with the openssl command line, in every mode. Encrypt and decrypt text with Camellia-256 by default (or 128 or 192) in CBC, ECB, CTR, CFB or OFB mode, with a password in the openssl enc -pbkdf2 format or your own key and IV in hex. It runs in your browser: text and keys never leave your device, and it's free with no sign-up.

How to encrypt and decrypt text with Camellia

Choose Encrypt or Decrypt. Type the text to encrypt, or paste the Base64 or hex text to decrypt — the format is detected automatically.
Enter a password (Generate makes a strong one), or switch to Key & IV (hex) and enter or generate a key and a 32-digit IV (ECB has no IV).
Pick the key size (256 bits by default) and the mode, CBC by default. To decrypt, use the same password, iteration count, key size and mode that encrypted the text.
Copy or download the result, or copy the openssl command under Same with OpenSSL to do the same on the command line — it never includes your password.

Features

Camellia-128, Camellia-192 and Camellia-256
CBC, ECB, CTR, CFB and OFB modes; PKCS#7 padding or none
Password mode in the openssl enc -pbkdf2 format, 10,000 PBKDF2 iterations by default or any number up to 10 million
An openssl enc command for every key size and mode, CTR included
Key & IV mode with your own hex key and IV, or generated ones
Base64 or hex in and out; copy, download or Swap the result

Is it private?

Yes. Camellia runs in WebAssembly inside your browser, and the password is stretched by the browser's Web Crypto; your text, password and key are never uploaded or saved.

Frequently asked questions

Is Camellia as secure as AES?

Yes. No practical attack on full Camellia is known, its key sizes match AES, and standards bodies in Europe and Japan chose it alongside AES. AES is the one supported almost everywhere, so pick Camellia when a standard, a partner or a system asks for it. As with any cipher, the password is the weak point — use a long random one.

Can I decrypt it with OpenSSL?

Yes, with no extra provider: echo 'U2FsdGVkX1…' | openssl enc -d -camellia-256-cbc -pbkdf2 -iter 10000 -a -A (OpenSSL then asks for the password). Change 256 and cbc to your key size and mode — ecb, ctr, cfb and ofb all exist — and add -nopad if you turned padding off. In Key & IV mode, use -K <key hex> -iv <IV hex> instead of -pbkdf2 -iter.

Where is Camellia used?

In TLS cipher suites, in OpenPGP software such as GnuPG, and in systems that follow Japan's CRYPTREC list or the ISO/IEC 18033-3 standard. This page encrypts text in the openssl enc format or with a raw key and IV; it doesn't open TLS traffic or OpenPGP messages, which have formats of their own.

Does Camellia detect if the text was changed?

No. CBC, ECB, CTR, CFB and OFB only encrypt: a changed ciphertext or a wrong password usually gives an error in CBC and ECB, but random bytes in the other modes. If you need tamper detection, use AES-GCM or ChaCha20-Poly1305.