----- Original Message ----- From: "Dr. Stephen Henson" <st...@openssl.org>
On Tue, Jun 16, 2009, Carl Young wrote:

How would the engine be expected to pick up the IV, aside from the cipher
context?


If you look at EVP_cipher_asn1_to_param() you'll see it calls
get_asn1_parameters in the EVP_CIPHER structure. This is supposed to be set to whatever function the EVP_CIPHER would use to decode the ASN1 and set the IV
and parameters (if any).

The IV isn't passed into the context, the EVP_CIPHER should decode it and pass
it into itself in whatever way is appropriate.

Some implementations don't bother to handle this case. This means they will
work fine in SSL/TLS but will fail in ASN1 cases such as CMS.

Hi Steve,

I see that now, thanks. I will get the engine code checked out and fixed.

Thanks,

Carl

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to