[Openswan dev] IV for openssl cyphers

[Alexander Sbitnev]

Sorry wrong list.
All those *swan derived branches fooled me.


-------- Original Message --------
Subject: 	IV for openssl cyphers
Date: 	Tue, 25 Feb 2014 18:02:29 +0400
From: 	Alexander Sbitnev <alexander.sbitnev at gmail.com>
To: 	dev at lists.openswan.org



   Just played a little bit with openssl plugin (added gost cypher from
openssl) and stumble on some strange detail inside it.
Inside openssl_crypter.c there is get_iv_size function and it use
block_size of cypher as return value for IV len:

METHOD(crypter_t, get_iv_size, size_t,
     private_openssl_crypter_t *this)
{
     return this->cipher->block_size;
}

Shouldn't it be like this?
         return this->cipher->iv_len;

I suppose for current imported cyphers from openssl "block_size" and
"iv_len" possible matching one each other, but this maybe wrong in a
general way.
Sorry if I am wrong here. My cryptology knowledge is very limited.



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openswan.org/pipermail/dev/attachments/20140227/cfbf7ae1/attachment.html>