Re: cipher suites for DTLSv1

2013-02-18 Thread Joel Dice
On Fri, 15 Feb 2013, Joel Dice wrote: On Fri, 15 Feb 2013, Joel Dice wrote: On Thu, 14 Feb 2013, Dr. Stephen Henson wrote: On Thu, Feb 14, 2013, Joel Dice wrote: Although OpenSSL seems to allow CBC-based suites with DTLS, from what I've read a block in a CBC stream can't be properly decode

Re: cipher suites for DTLSv1

2013-02-15 Thread Joel Dice
On Fri, 15 Feb 2013, Joel Dice wrote: On Thu, 14 Feb 2013, Dr. Stephen Henson wrote: On Thu, Feb 14, 2013, Joel Dice wrote: Although OpenSSL seems to allow CBC-based suites with DTLS, from what I've read a block in a CBC stream can't be properly decoded without the prior block being availabl

Re: cipher suites for DTLSv1

2013-02-15 Thread Joel Dice
On Thu, 14 Feb 2013, Dr. Stephen Henson wrote: On Thu, Feb 14, 2013, Joel Dice wrote: Although OpenSSL seems to allow CBC-based suites with DTLS, from what I've read a block in a CBC stream can't be properly decoded without the prior block being available (http://en.wikipedia.org/wiki/Cipher_

Re: cipher suites for DTLSv1

2013-02-14 Thread Dr. Stephen Henson
On Thu, Feb 14, 2013, Joel Dice wrote: > Hi all, > > I've been experimenting with the DTLS support in OpenSSL recently > and discovered that my application was receiving garbage plaintext > when packets were lost or reordered. Closer inspection suggested a > possible cause: I was only enabling c