Re: possible padding bug in des3

[Francis Cianfrocca]

Hmmm. Just reproduced the problem very simply. Could it be a platform problem? We are encrypting on a SuSE Linux 7.3 machine using openssl 0.9.6b-engine (with no hardware), and decrypting on OpenBSD 3.2 (the Oct 3 snapshot) with crypto hardware (broadcom 5820). I'll try to reproduce on Linux.
-f

Lutz Jaenicke wrote:

[EMAIL PROTECTED]">

On Sun, Oct 27, 2002 at 03:48:03PM -0500, Francis Cianfrocca wrote:

Hi,
We found a problem in EVP which apparently affects padding in des3-cbc. 
This problem is in the current 9.7 snapshot as well as in beta 3. The 
9.7 library is unable to decrypt DES-EDE3-CBC documents encrypted using 
0.9.6 or any other crypto library. You can demonstrate easily as follows:

openssl-9.6g> openssl enc -des3 -in plaintext -out ciphertext
  [supply an eight-character ascii encryption key at the command line]

openssl-9.7> openssl enc -d -des3 -in ciphertext -out plaintext2

This dumps out an error in DecryptFinal_ex. The error return is line 426 
of crypto/evp/evp_enc.c, which deals with padding. Is this a known 
issue? I noticed that there have been other posts over the last few days 
related to padding problems, but not specifically this.

???

I have just tried to reproduce your problem with 0.9.7-beta3 but it
did work out without problems...

Best regards,
	Lutz