Does the attached oneliner make sense ? IMO it doesnt break anything,
but allows reusing the EVP_CIPHER_CTX in calls to EVP_EncryptUpdate,
after EVP_EncryptFinal is called.

Any comments greatly appreciated :)

The diff is against the released 0.9.6c version of the OpenSSL
library.

PT> Currently EVP_Encrypt* interface doesnt support
PT> encryption of multiple data streams with a single
PT> symmetric key. Is there any chance patches to
PT> allow this to be accepted in the official OpenSSL
PT> codebase ? Currently I'm thinking to modify EVP_EncryptFinal
PT> so it leaves the EVP_CIPHER_STATE in a consistent state
PT> after finishing its work.

PT> Any comments on this ? I am aware of the fact that encrypting
PT> multiple data streams with a single key is not such a good idea
PT> of a security point of view.

Attachment: evp_enc.c.diff
Description: Binary data

Reply via email to