Hi all,

I have found an anomaly in the EVP code with an ECB cipher which is claiming to have an IV length greater than zero.

I am under the understanding that all ECB algorithms should have an IV size of zero - is that correct?

The gdb trace is shown below - is this a potential bug or am I doing something stupid?

297                 key->cipher = EVP_aes_256_ecb();
(gdb)
309         key->keyLen = EVP_CIPHER_key_length(key->cipher);
(gdb)
312         key->key = apr_pcalloc(p, key->keyLen);
(gdb)
313         if (!key->key) {
(gdb)
318         if (PKCS5_PBKDF2_HMAC_SHA1(pass, passLen,
(gdb)
324         key->doPad = doPad;
(gdb)
325         key->ivSize = EVP_CIPHER_iv_length(key->cipher);
(gdb) next
326         if (ivSize) {
(gdb) print key->ivSize
$7 = 16
     ^^ <---- should be 0
(gdb) print key->keyLen
$8 = 32
(gdb)

Regards,
Graham
--

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to