[Bug crypto/27849] getIV() call on cipher for DESede/CBC returns null

[csm at gnu dot org]

------- Comment #6 from csm at gnu dot org  2006-06-11 07:20 -------
You can get the randomly-generated IV from one of the ciphers, however, and use
that to initialize the second one. And that is presumably what the code that
this breaks on was trying to do: the getIV() call was failing because it
returned null.

It doesn't matter if we consider using a cipher mode without giving an IV an
error or not: Sun's RI supports this behavior, and so must we. Sun's RI
Javadocs even say that the implementation must generate parameters such as the
IV if none is specified.

Since using a constant value for the IV would be clearly bogus, I think the
only solution is to use a random one.


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=27849