Re: CBC Padding removal

2003-12-08 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 8 Dec 2003 14:49:29 + (GMT), Dave Roberts <[EMAIL PROTECTED]> said: dave.roberts> OK, where or to whom do I send the diff output? [EMAIL PROTECTED] - Please consider sponsoring my work on free software. See http://www.free.lp.se/sponsoring.html for

Re: CBC Padding removal

2003-12-08 Thread Dave Roberts
On Wed, 3 Dec 2003, Richard Levitte - VMS Whacker wrote: > dave.roberts> The "issues" are how to cope with it within the > dave.roberts> set_padding function. > > Hmm, extend the flags just a little bit maybe, so we'd end up adding > the following lines: I've made local changes to that function

Re: CBC Padding removal

2003-12-03 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 3 Dec 2003 16:43:29 + (GMT), Dave Roberts <[EMAIL PROTECTED]> said: dave.roberts> On Wed, 3 Dec 2003, Dr. Stephen Henson wrote: dave.roberts> dave.roberts> > Are you suggesting that OpenSSL should include support dave.roberts> > for other padding scheme

Re: CBC Padding removal

2003-12-03 Thread Dave Roberts
On Wed, 3 Dec 2003, Dr. Stephen Henson wrote: > Are you suggesting that OpenSSL should include support for other padding > schemes or that it should be possible to disable PKCS#5 padding so an > application can handle its own padding? The former would be my preference. I already know that I coul

Re: CBC Padding removal

2003-12-03 Thread Dr. Stephen Henson
On Wed, Dec 03, 2003, Dave Roberts wrote: > Hi > > Within evp/evp_enc.c, function EVP_DecryptFinal_ex() it looks at the last > byte of any padding, then works backwards ensuring that all padding > characters are the same. This is, I believe, conformant to PKCS#5. > > However, this doesn't allow

CBC Padding removal

2003-12-03 Thread Dave Roberts
Hi Within evp/evp_enc.c, function EVP_DecryptFinal_ex() it looks at the last byte of any padding, then works backwards ensuring that all padding characters are the same. This is, I believe, conformant to PKCS#5. However, this doesn't allow for other padding schemes such as that specified in FIPS