Re: cipher suites for DTLSv1

2013-02-18 Thread Joel Dice
On Fri, 15 Feb 2013, Joel Dice wrote: On Fri, 15 Feb 2013, Joel Dice wrote: On Thu, 14 Feb 2013, Dr. Stephen Henson wrote: On Thu, Feb 14, 2013, Joel Dice wrote: Although OpenSSL seems to allow CBC-based suites with DTLS, from what I've read a block in a CBC stream can't be properly decode

Re: cipher suites for DTLSv1

2013-02-15 Thread Joel Dice
On Fri, 15 Feb 2013, Joel Dice wrote: On Thu, 14 Feb 2013, Dr. Stephen Henson wrote: On Thu, Feb 14, 2013, Joel Dice wrote: Although OpenSSL seems to allow CBC-based suites with DTLS, from what I've read a block in a CBC stream can't be properly decoded without the prior block being availabl

Re: cipher suites for DTLSv1

2013-02-15 Thread Joel Dice
On Thu, 14 Feb 2013, Dr. Stephen Henson wrote: On Thu, Feb 14, 2013, Joel Dice wrote: Although OpenSSL seems to allow CBC-based suites with DTLS, from what I've read a block in a CBC stream can't be properly decoded without the prior block being available (http://en.wikipedia.org/wiki/Cipher_

cipher suites for DTLSv1

2013-02-15 Thread Joel Dice
Hi all, I've been experimenting with the DTLS support in OpenSSL recently and discovered that my application was receiving garbage data when packets were lost or reordered. Closer inspection explained why: I was only enabling cipher suites which either used stream ciphers like RC4 or block c

Re: cipher suites for DTLSv1

2013-02-14 Thread Dr. Stephen Henson
On Thu, Feb 14, 2013, Joel Dice wrote: > Hi all, > > I've been experimenting with the DTLS support in OpenSSL recently > and discovered that my application was receiving garbage plaintext > when packets were lost or reordered. Closer inspection suggested a > possible cause: I was only enabling c

cipher suites for DTLSv1

2013-02-14 Thread Joel Dice
Hi all, I've been experimenting with the DTLS support in OpenSSL recently and discovered that my application was receiving garbage plaintext when packets were lost or reordered. Closer inspection suggested a possible cause: I was only enabling cipher suites which either used stream ciphers l