Bug#412979: [Pkg-openssl-devel] Re: [maf@appgate.com: Bug#412979: encfs fails when openssl is upgraded to 0.9.8e-2]

[Kurt Roeckx]

On Thu, Mar 01, 2007 at 05:40:58PM +0100, maf at appgate.com wrote:
> On  1 mar, Eduard Bloch wrote:
> > any idea on what is going on there? See below.
> 
> I might add some more details:
> 
> I added debug printouts to the SSL_Cipher::readKey() method. And found
> that it seems as if streamDecode() returns a different result. At least
> the first four bytes of the inbuffer and key match.
> 
> Could the problem be that streamDecode() calls:
>   EVP_DecryptInit_ex( &key->stream_dec, NULL, NULL, NULL, ivec);
> i.e. uses NULL as the cipher type. And that the default algorithm has
> changed?

In initKey() there is actually a call:
EVP_DecryptInit_ex( &key->stream_dec, _streamCipher, NULL, NULL, NULL);

which should have set it.

There are various calls which set 1 parameter:
    EVP_DecryptInit_ex( &key->stream_dec, _streamCipher, NULL, NULL, NULL);
    EVP_DecryptInit_ex( &key->stream_dec, NULL, NULL, KeyData(key), NULL);
    EVP_DecryptInit_ex( &key->stream_dec, NULL, NULL, NULL, ivec);


First one says which cipher to use, then which key to use,
then which iv to use.  According to the documentation,
this should work.


Kurt