1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
|
<tt>
<div dir="ltr">Hi Charley,<div><br></div><div>Thanks for clarifying that - that makes sense to me.</div><div><br></div><div><br></div><div>Cheers</div><div><br></div><div>Hugh<br><div class="gmail_extra"><br clear="all"><div><br>
<br>
<br></div><div class="gmail_quote">On 8 January 2014 00:59, Charley Nibley <span dir="ltr"><<a href="mailto:cnibley@gmail.com" target="_blank">cnibley@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
<br>
<div dir="ltr">Hi Hugh,<br><div><br>This behavior you are seeing is expected. It changed with a fix to prevent an empty string IV passed to the function. IV is always mandatory even if at some point in a previous build it was being passed as all zeros. I believe the doc just needs updating.<br><br>
<br>
<br>
<br>
<br>
<br>See line 173: <a href="https://github.com/dlitz/pycrypto/commit/411f60f58cea79f7e93476ba0c069b80a2a4c1a0" target="_blank">https://github.com/dlitz/pycrypto/commit/411f60f58cea79f7e93476ba0c069b80a2a4c1a0</a><br><div><br>
<br>
<br>
<br>
<br>And see the comments here: <a href="https://bugs.launchpad.net/pycrypto/+bug/997464" target="_blank">https://bugs.launchpad.net/pycrypto/+bug/997464</a><br><br>
<br></div><div>Charley Nibley<br></div></div></div><div class="gmail_extra"><br><br><div class="gmail_quote"><div><div class="h5">On Tue, Jan 7, 2014 at 9:43 AM, Hugh Macdonald <span dir="ltr"><<a href="mailto:hugh.macdonald@nvizible.com" target="_blank">hugh.macdonald@nvizible.com</a>></span> wrote:<br><br>
<br>
<br>
<br>
</div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5"><div dir="ltr">Hi,<div><br></div><div>I've just been trying to figure out why some code of mine broke after an update from 2.0.1 to 2.6.1, and found that I hadn't been passing an IV into AES.new() (using MODE_CFB).</div><br>
<br>
<br>
<br>
<br>
<br>
<div><br></div><div>Previously, it was happy with this, and, according to the docs here (<a href="https://www.dlitz.net/software/pycrypto/api/current/" target="_blank">https://www.dlitz.net/software/pycrypto/api/current/</a>), "It is optional and when not present it will be given a default value of all zeroes."</div><br>
<br>
<br>
<br>
<br>
<br>
<div><br></div><div>Looking at the code that throws the exception (<a href="https://github.com/dlitz/pycrypto/blob/master/src/block_template.c" target="_blank">https://github.com/dlitz/pycrypto/blob/master/src/block_template.c</a>, line 163), it doesn't allow for doing what the docs suggest it will.</div><br>
<br>
<br>
<br>
<br>
<br>
<div><br></div><div>I'm not sure whether I've either misunderstood something or which of the two is wrong, but I thought I'd at least flag it for discussion...</div><div><br></div><div><br>
<br>
<br></div><div>Hugh</div></div><br>
<br>
<br><br>
</div></div><div style="color:rgb(0,0,255)"><span style="color:rgb(102,102,102)"><font face="Arial">D I S C L A I M E R : This email and any files transmitted with it are intended solely for the <span>intended </span>addressee,<br>
and may contain confidential information or material protected by law, <br>
copyright or other legislation. If you have received this message in <br>
error, please return it to the sender or notify the sender by calling <br>
<a href="tel:%2B44%20%280%2920%203167%203860" value="+442031673860" target="_blank">+44 (0)20 3167 3860</a>, and immediately and permanently delete it. You <br>
should not copy it or use it for any purpose, nor disclose its contents <br>
to any other person. Only the intended recipient may place any reliance <br>
upon it. Nvizible Limited accepts no responsibility or liability for <br>
emails sent by its employees or personnel which are not sent in the <br>
course of its business or that of its clients.</font></span></div><div style="color:rgb(0,0,255)"><font face="Arial"> </font></div><div style="color:rgb(0,0,255)"><span style="color:rgb(102,102,102)"><font face="Arial">Nvizible<br>
Limited, 8/9 Carlisle Street, London W1D 3BP . Registered in England & Wales with Company Number: 6900121</font></span></div><br>_______________________________________________<br><br>
pycrypto mailing list<br><br>
<a href="mailto:pycrypto@lists.dlitz.net" target="_blank">pycrypto@lists.dlitz.net</a><br><br>
<a href="http://lists.dlitz.net/cgi-bin/mailman/listinfo/pycrypto" target="_blank">http://lists.dlitz.net/cgi-bin/mailman/listinfo/pycrypto</a><br><br>
<br></blockquote></div><br></div><br>
<br>_______________________________________________<br><br>
pycrypto mailing list<br><br>
<a href="mailto:pycrypto@lists.dlitz.net">pycrypto@lists.dlitz.net</a><br><br>
<a href="http://lists.dlitz.net/cgi-bin/mailman/listinfo/pycrypto" target="_blank">http://lists.dlitz.net/cgi-bin/mailman/listinfo/pycrypto</a><br><br>
<br></blockquote></div><br></div></div></div><br>
<br>
<br><br>
<div style="color:rgb(0,0,255)"><span style="color:rgb(102,102,102)"><font face="Arial" size="2">D I S C L A I M E R : This email and any files transmitted with it are intended solely for the <span>intended </span>addressee,<br>
and may contain confidential information or material protected by law, <br>
copyright or other legislation. If you have received this message in <br>
error, please return it to the sender or notify the sender by calling <br>
+44 (0)20 3167 3860, and immediately and permanently delete it. You <br>
should not copy it or use it for any purpose, nor disclose its contents <br>
to any other person. Only the intended recipient may place any reliance <br>
upon it. Nvizible Limited accepts no responsibility or liability for <br>
emails sent by its employees or personnel which are not sent in the <br>
course of its business or that of its clients.</font></span></div><div style="color:rgb(0,0,255)"><font face="Arial" size="2"> </font></div><div style="color:rgb(0,0,255)"><span style="color:rgb(102,102,102)"><font face="Arial" size="2">Nvizible<br>
Limited, 8/9 Carlisle Street, London W1D 3BP . Registered in England & Wales with Company Number: 6900121</font></span></div>
</tt>
|