On Fri, Jan 02, 2015 at 12:44:43PM -0500, Salz, Rich wrote: > They are I/O errors (openssl errstr is your friend here) and probably related to the tape I/O device not being ready, timing out, or something like that. Tape devices generally require I/O operations to be in multiples of a tape block. The output of "openssl enc" is not going to satisfy that property. A final filter is required that "pads" the encrypted output to a multiple of the tape block size, and strips the padding on input. -- Viktor.