On Fri, May 02, 2014 at 11:41:46AM +0200, Mechiel Lukkien wrote: > thoughts? does conversion from uchar* to bignum, and back to uchar* > indeed strip leading zeroes? > > i think the salt should always be passed around as just bytes. in SRP > it is never used for calculations with bignums.
after sending i realised that uchar* obviously won't work for data with zero-bytes. still, if i didn't miss anything, the salts are randomly generated bytes, so the zeroes can occur. ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org