The attached patch allows for the FIPS-81 padding scheme to be permitted on decryption of a symmetric cipher. New padding modes are defined in evp.h, and can be set using EVP_CIPHER_CTX_set_padding().
FIPS-81 allows for random bytes in between the last byte of plaintext and the last byte of the block boundary. For encryption, no change has been employed as PKCS#5 is effectively a form of FIPS-81. Diffs were taken against the 0.9.7c code. Dave ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]