[openssl.org #811] cross-platform bug in RC4 > 144 bits?

2004-01-18 Thread Andy Polyakov via RT
It turned out that OpenSSL prior 0.9.7 can't handle RC4 keys longer than 128 bits correctly. The bug was fixed in Nov 2002, but never made it to 0.9.6 branch. The fix is commited even to 0.9.6-stable, but as immediately acting relief apply http://cvs.openssl.org/filediff?f=openssl/crypto/evp/e_rc4

[openssl.org #811] cross-platform bug in RC4 > 144 bits?

2004-01-14 Thread Lutz Jaenicke via RT
[EMAIL PROTECTED] - Wed Jan 14 22:17:46 2004]: > I'm finding that the output from RC4 is different for Linux and > Solaris once > the key strength > 144. However, Linux and Win32 produce the same RC4 > results up to 2048 bits. > > I have including a short program that can reproduce the followin

[openssl.org #811] cross-platform bug in RC4 > 144 bits?

2004-01-14 Thread terry stoneman via RT
Hi, I have encountered weird behavior with openssl that I can't explain, and I'm wondering if it's a bug. I have compiled the openssl-0.9.6j library on Linux and Solaris,using the default Configure options. ("Configure linux-elf" for Linux and "Configure solaris-sparcv7-cc" for Solaris). I'm