Hello Jan,

Op vr 15 mrt. 2019 om 18:19 schreef Jan Just Keijser <janj...@nikhef.nl>:

> who says it is transmitted before the encrypted data? where in the source
> is that specified? If you look at crypto.c routines openvpn_encrypt_aead vs
> openvpn_encrypt_v1 you will find that the HMAC part seems to be added at
> the end (e.g. look for
>   hmac_start = BEND(&work);
>

https://build.openvpn.net/doxygen/group__data__crypto.html
under crypto packet formats:
[ opcode ] [ - packet ID - ] [ TAG ] [ * packet payload * ]
[ - opcode/peer-id - ] [ - packet ID - ] [ TAG ] [ * packet payload * ]

This was also discussed in the original email exchange, though there was no
answer to Steffan's question:
https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg09879.html

Kind regards,

Pieter Hulshoff
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to