El vie, 04-04-2008 a las 08:25 +1000, Peter Waltenberg escribió:
> It happens here on my 64 bit Linux system as well if I run the openssl that
> comes with the OS.
> 
> However, if I run the openssl executable that I build for our own use
> (which has been modified to use our own RNG code) the salt varies as
> expected.
> 

So, any chance for me to get it working using a vanilla source? :)

> Peter
> 
> 
> 
>                                                                               
>                                                               
>   From:       David Erosa García <[EMAIL PROTECTED]>                          
>                                                               
>                                                                               
>                                                               
>   To:         [email protected]                                         
>                                                               
>                                                                               
>                                                               
>   Date:       04/04/2008 01:26                                                
>                                                               
>                                                                               
>                                                               
>   Subject:    64 bits computer always returns the same salt                   
>                                                               
>                                                                               
>                                                               
> 
> 
> 
> 
> 
> Hello all.
> 
> I tried the openssl-users list but I think this may be a question for
> the devel list:
> 
> I'm doing my "homework" about openssl, but *this question has nothing to
> do with it*. It's just a doubt that arised while doing it.
> 
> There is one exercise with the following text:
> 
> --------
> Con el comando “openssl enc” y la siguiente clave AES:
> 188458A6D15034DFE386F23B61D43774 se puede descifrar cierta información.
> Podrías decir cual?
> --------
> Using the command " openssl enc" and the following AES key:
> 188458A6D15034DFE386F23B61D43774 you can decode some information, could
> you say what?
> 
> I started playing with "openssl enc" and I thought the only thing I
> could "guess" was the salt (Surely I'm wrong).
> 
> So I ran the command with a random IV:
> openssl enc -aes128 -K 188458A6D15034DFE386F23B61D43774 -iv 1 -P
> 
> I found that the salt varies as it should on two machines with 32 bit
> CPU (not my main one):
> 
> Office's computer (openssl 0.9.8g-4ubuntu2):
> salt=4075DFB76496F2B7
> salt=4045D8B76466EBB7
> salt=40C5DAB764E6EDB7
> salt=4015DEB76436F1B7
> salt=4025DFB76446F2B7
> 
> A server I have somewhere else (openssl 0.9.8c-4etch1):
> salt=50D882BF0C000000
> salt=B05DD9BF0C000000
> salt=A0CCC7BF0C000000
> salt=E0C88BBF0C000000
> salt=204190BF0C000000
> 
> But when I run it on my main computer, it always outputs the same salt!
> This machine is a 64bit CPU, running a 64bits linux distribution
> (openssl 0.9.8g-4ubuntu2):
> 
> salt=0004000000000000
> salt=0004000000000000
> salt=0004000000000000
> salt=0004000000000000
> 
> I've been searching through  the openssl lists and found nothing about
> this behavior.
> 
> What can be happening? Is it about the 64 bit version of openssl?
> 
> Thanks a lot for your attention.
> 
> Regards.
> 
> 
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> Development Mailing List                       [email protected]
> Automated List Manager                           [EMAIL PROTECTED]
> 

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to