Re: openssl-0.9.8l,crypto library using the EVP api & ivec.

2010-02-23 Thread Graham Swallow
> Should the caller specify an empty ivec (to the correct length) in this case > or am I missing something? I think so too. If you always initialise the IVEC to NUL bytes, and use the same key to encrypt lots of small packets, it becomes easier to crack the key. If you use some variable data tha

openssl-0.9.8l,crypto library using the EVP api & ivec.

2010-02-23 Thread Robert Doncaster
Hello, Looking at test/evp_test.c and the test data test/evptests.txt for encryption/decryption, I don't understand how the initialisation vector ('iv' variable) is used. The test data in evptests.txt is expressed as Hex strings which are then translated to bit patterns before use: cipher: