On Fri, Nov 28, 2008, Kosta Welke wrote:

> Hi!
>
> from enc.c:
> /* Note that str is NULL if a key was passed on the command
>  * line, so we get no salt in that case. Is this a bug?
>  */
>
> I say yes and have a fix.
>

Well I'd say the salt is used to derive the key and iv from the passphrase. If
you specify the key and iv explicitly the salt isn't used.

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to