On Tue, Aug 31, 2004 at 05:16:23PM +1000, Russell Robinson wrote: > Potential bug #1: should the test be: > if (length < BlockSize()) > (i.e. "less than" instead of "less than or equal")?
No, the current code is correct. > Potential bug #2: is it intended to work this way? Should CTS mode > really require the plaintext to be > the block size for a symmetric > stream cipher? Yes, it is intended to work this way. If you have to use CTS (why not CFB, OFB, or CTR modes?) with plaintext that are less than a block long, then use the IV stealing option.
