linux-kernel - Re: Question about ctr mode 3des-ede IV len

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Wed, 7 Dec 2016 15:15:34 +0200
From:   Jussi Kivilinna <jussi.kivilinna@....fi>
To:     "Longpeng (Mike)" <longpeng2@...wei.com>,
        jussi.kivilinna@...tian.com, herbert@...dor.apana.org.au
Cc:     Gonglei <arei.gonglei@...wei.com>,
        "Zhoujian (jay, Euler)" <jianjay.zhou@...wei.com>,
        "Wubin (H)" <wu.wubin@...wei.com>, linux-kernel@...r.kernel.org
Subject: Re: Question about ctr mode 3des-ede IV len

Hello,

07.12.2016, 14:43, Longpeng (Mike) kirjoitti:
> Hi Jussi and Herbert,
> 
> I saw serveral des3-ede testcases(in crypto/testmgr.h) has 16-bytes IV, and the
> libgcrypt/nettle/RFC1851 said the IV-len is 8-bytes.
> 
> Would you please tell me why these testcases has 16-bytes IV ?

Because I used same tool to create test-vectors which I had previously used to create AES/Camellia/Serpent/Twofish test-vectors. So, I must have forgotten to change 16-byte IV generation to 8 bytes and thus those testcases in crypto/testmgr.h have wrong length. The extra trailing 8 bytes are not used and can be removed.

-Jussi

> 
> Thank you. :)
>