bug-classpath
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Bug crypto/27849] getIV() call on cipher for DESede/CBC returns null


From: raif at swiftdsl dot com dot au
Subject: [Bug crypto/27849] getIV() call on cipher for DESede/CBC returns null
Date: 11 Jun 2006 06:50:02 -0000


------- Comment #5 from raif at swiftdsl dot com dot au  2006-06-11 06:50 
-------
two comments regarding the patch:

* all modes, except for ECB, require or use an IV.
* although, strictly speaking, not passing an IV to a mode, other than ECB, is
an error, generating a random one is not always a good option.  consider the
case where you instantiate, and initialize 2 ciphers with the same
transformation and initialization parameter;  if the IV is random, you will not
be able to decrypt with one, what the other has encrypted.  on the other hand,
using a constant value IV --e.g. all zeroes-- is an acceptable alternative.


-- 

raif at swiftdsl dot com dot au changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |raif at swiftdsl dot com dot
                   |                            |au


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=27849





reply via email to

[Prev in Thread] Current Thread [Next in Thread]