In message <[EMAIL PROTECTED]> on Wed, 13 Apr 2005 10:43:13 +0300, "Israel 
Viente" <[EMAIL PROTECTED]> said:

israel_viente> I wanted to use cbc3 encryption but saw the following
israel_viente> in openssl-0.9.7f\crypto\des:
israel_viente> 
israel_viente> 1) In FILE0 - "cbc3_enc.c           - des_3cbc_encrypt() source, 
don't use
israel_viente> this function."
israel_viente> 
israel_viente> 2) In cbc3_enc.c - "/* HAS BUGS! DON'T USE - this is only 
present for use in
israel_viente> des.c */"
israel_viente> 
israel_viente> Are these comments up to date?

I assume so, not having looked much further.

israel_viente> Is it reliable to use cbc3 encryption with the openssl? 

Yes.  Really, the best way to use crypto functionality in OpenSSL is
through the EVP interface.  However, if you must go low level, take a
look at DES_ede2_cbc_encrypt() anf DES_ede3_cbc_encrypt().  There's a
manual page.

Cheers,
Richard

-----
Please consider sponsoring my work on free software.
See http://www.free.lp.se/sponsoring.html for details.

-- 
Richard Levitte                         [EMAIL PROTECTED]
                                        http://richard.levitte.org/

"When I became a man I put away childish things, including
 the fear of childishness and the desire to be very grown up."
                                                -- C.S. Lewis
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to