Thanks jimmy..I realised that much, the update is happening from ssl3_mac
defined in s3_enc.c, some "s2n" of the length is called, followed by a
digestupdate(md, 2)..in case of READ, md is an empty array..why do we copy
the ssl record length into a temp var "p" and then do a s2n followed by an
digest update?

Thanks
--Gayathri

Gayathri Sundar wrote:
> Can someone give me inputs on the function ssl3_mac, especially where
> it is called s->method->ssl3_enc->mac(s,&(p[wr->length]),1);
>
> I need to know what p[wr->length] is pointing to and why we do a
> digest update of 2 bytes from that.
>
> The code is taken from s3_pkt.c function ssl3_write_bytes.
>
> Thanks
> --Gayathri

i hope u meant in 'do_ssl3_write()'.

p[wr->length] is pointing to the place just after your data. this is where
you want the mac to be placed. if you look at ssl3_mac(), the second param
is the o/p param.

where exactly is it in the code is it that you mentioned update of 2 bytes
being done?


-jb
--
mathematician, n.:
        Some one who believes imaginary things appear right before your i's.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]



********************************************************************************
This email message (including any attachments) is for the sole use of the 
intended recipient(s) 
and may contain confidential, proprietary and privileged information. Any 
unauthorized review, 
use, disclosure or distribution is prohibited. If you are not the intended 
recipient, 
please immediately notify the sender by reply email and destroy all copies of 
the original message. 
Thank you.
 
Intoto Inc. 

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to