[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [gnutls-dev] Symmetric cipher API
From: |
Werner Koch |
Subject: |
Re: [gnutls-dev] Symmetric cipher API |
Date: |
Tue, 20 Nov 2007 09:18:44 +0100 |
User-agent: |
Gnus/5.110007 (No Gnus v0.7) |
On Tue, 20 Nov 2007 00:31, address@hidden said:
> I'm not sure I understand what exactly is so protocol-dependent
> here. An application needs to encrypt 900 bytes using a symmetric
> cipher with a block size of 8 bytes. It looks to me like the only
> option here is 112, continuous, full blocks and one partial block,
> using PKCS padding. That's pretty much a standard, if there is one,
Most of it is protocol dependent. What mode does the protocol require,
does it require padding, how is the padding done, is there a higher
level of blocking required, are there special variants of the mode to be
employed and so on. A lot of parameters and not everyone is using CBC
with the de-facto standard padding as CMS (pkcs#7) encryption does.
Salam-Shalom,
Werner
--
Die Gedanken sind frei. Auschnahme regelt ein Bundeschgesetz.
Re: [gnutls-dev] Symmetric cipher API, Simon Josefsson, 2007/11/25