Re: [openssl.org #3442] [patch] AES XTS: supporting custom iv from openssl enc command

2014-07-12 Thread Jitendra Lulla
Sorry for responding late. I am using openssl-1.0.1h. My af_alg engine does support xts. Following are the findings: 1. The command works fine if I dont make any changes in the openssl.cnf file: root@bodhi64vm:/home/jlulla/install/bin# ./openssl enc -aes-128-xts -in data_32 -out enc_data_32 -K

Re: Re : Re: [openssl.org #3442] [patch] AES XTS: supporting custom iv from openssl enc command

2014-07-12 Thread Peter Waltenberg
Doh. ThanksPete -owner-openssl-...@openssl.org wrote: - To: openssl-dev@openssl.orgFrom: "Dr. Stephen Henson" Sent by: owner-openssl-...@openssl.orgDate: 07/12/2014 10:16PM Subject: Re: Re : Re: [openssl.org #3442] [patch] AES XTS: supporting custom iv from openssl enc command On Sat, Ju

Re: Re : Re: [openssl.org #3442] [patch] AES XTS: supporting custom iv from openssl enc command

2014-07-12 Thread Dr. Stephen Henson
On Sat, Jul 12, 2014, Peter Waltenberg wrote: > Or extend EVP_CIPHER_CTX_ctrl() to handle things like changing IV's ? Modes > like XTS may gain a lot from that, you could use EVP_CIPHER_CTX_copy() to > avoid repeated key expansion costs, change the IV with EVP_CIPHER_CTX_ctrl() > and do the next

Re: [openssl.org #3442] [patch] AES XTS: supporting custom iv from openssl enc command

2014-07-12 Thread Ben Laurie
On 11 July 2014 11:56, Andy Polyakov wrote: >>> Bottom line [still] is that enc is not the place to perform XTS, >>> *unless* it's treated specially. In other words question should not be >>> about setting IV, but about *if* XTS should be supported by enc, and if >>> so, how exactly. >> >> It seem