> I have not used BBj. But until someone knowledgeable chimes in ... can 
> you provide an example showing the difference between the CF versus 
> BBj results? 


Hi Leigh--
Thanks for the response... It looks like BBj is 

1. using AES/CFC/NoPadding
2. using an IV of zero (00000000000000000000000000000000)
3. and some additional kind of padding that is throwing a monkey wrench into 
the works.

When I encrypt the string (1234567891234567) I now get:

1DF20DDA4A5C45DCD2BCDB191D08559C

They get:

1DF20DDA4A5C45DCD2BCDB191D08559CC3BF026C725CBB1C366ADEC4867917AA

      
Their tech support guy says:

----------------------
The decrypt function in BBj and PRO/5 requires that the last byte of the plain 
text contain the number of pad characters.  When a BBj or PRO/5 function is 
used to encrypt a 16 byte string, 15 pad characters are added to the plain text 
and the last byte is set to 16 ($10$), i.e. the plain text for 
"1234567891234567" is 
$3132333435363738393132333435363700000000000000000000000000000010$.

c$=encrypt("1234567891234567",mode="cryptpass=songsparrowroysarahkle==") causes 
BBj and PRO/5 to encrypt 
$3132333435363738393132333435363700000000000000000000000000000010$ with an 
initialization vector of $00000000000000000000000000000000$ and a key of 
$618DF206BDC0F07C95BE7A6CDC935BEB$.
--------------------------

I still haven't figured out quite how to get this padding into CF to get the 
same results...


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:331413
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Reply via email to