I found a bug which makes the DLIES implementation in Crypto++ 5.0 not
compatible with DLIES as defined in the current P1363a draft when DHAES
mode (the default) is enabled. It doesn't affect security, but you
probably want to avoid using DLIES in DHAES mode until the bug is fixed.
If anyone is already using it in a released product, and would like to see
a backwards compatibility option in future versions of Crypto++, please
let me know.

This also applies to ECIES, but it defaults to non-DHAES mode, so you're 
not affected unless you specified DHAES mode explicitly.

Reply via email to