bug-classpath
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Bug crypto/27849] getIV() call on cipher for DESede/CBC returns null


From: csm at gnu dot org
Subject: [Bug crypto/27849] getIV() call on cipher for DESede/CBC returns null
Date: 11 Jun 2006 07:20:21 -0000


------- Comment #6 from csm at gnu dot org  2006-06-11 07:20 -------
You can get the randomly-generated IV from one of the ciphers, however, and use
that to initialize the second one. And that is presumably what the code that
this breaks on was trying to do: the getIV() call was failing because it
returned null.

It doesn't matter if we consider using a cipher mode without giving an IV an
error or not: Sun's RI supports this behavior, and so must we. Sun's RI
Javadocs even say that the implementation must generate parameters such as the
IV if none is specified.

Since using a constant value for the IV would be clearly bogus, I think the
only solution is to use a random one.


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=27849





reply via email to

[Prev in Thread] Current Thread [Next in Thread]