Re: SVND -k and -K ERRATUM

2007-01-31 Thread Woodchuck
On Tue, 30 Jan 2007, Don Smith wrote: I looked at the source code. In /src/sys/dev/vnd.c, it has the lines: blf_ecb_encrypt(vnd-sc_keyctx, iv, sizeof(iv)); if (encrypt) blf_cbc_encrypt(vnd-sc_keyctx, iv, addr, bsize); This looks like it encrypts the

Re: SVND -k and -K ERRATUM

2007-01-31 Thread Don Smith
I did notice something along those lines. I have some special characters in my encryption keys. They work fine when entered in the main OpenBSD shell, and work fine when run out of an XTerm. They don't work if I try to use them from a KDE Konsole. Woodchuck [EMAIL PROTECTED] wrote: A problem

Re: SVND -k and -K ERRATUM

2007-01-30 Thread Don Smith
I looked at the source code. In /src/sys/dev/vnd.c, it has the lines: blf_ecb_encrypt(vnd-sc_keyctx, iv, sizeof(iv)); if (encrypt) blf_cbc_encrypt(vnd-sc_keyctx, iv, addr, bsize); This looks like it encrypts the key using the iv of all zeroes. True, it

Re: SVND -k and -K ERRATUM

2007-01-30 Thread Ted Unangst
On 1/30/07, Don Smith [EMAIL PROTECTED] wrote: I looked at the source code. In /src/sys/dev/vnd.c, it has the lines: blf_ecb_encrypt(vnd-sc_keyctx, iv, sizeof(iv)); if (encrypt) blf_cbc_encrypt(vnd-sc_keyctx, iv, addr, bsize); This looks like it encrypts

Re: SVND -k and -K ERRATUM

2007-01-27 Thread Woodchuck
On Sat, 27 Jan 2007, Woodchuck wrote: Disclaimer: I am not a cryptanalyst. Maybe that's all FUD and blown smoke. If I recall the source code correctly, using -k, you are already using salt -- of zero. Checked the source code, I was wrong. In the -k case, the passphrase