Re: [Openvpn-devel] Unable to use -OFB or -CFB ciphers in OpenVPN

2009-06-01 Thread dave
> -Original Message- > From: Victor Wagner [mailto:vi...@wagner.pp.ru] ... > > > > The OFB and CFB cipher modes in OpenVPN have not been > well-tested and > > should be considered experimental at this point. > > > > They are not compiled by default mostly to prevent someone from >

Re: [Openvpn-devel] Unable to use -OFB or -CFB ciphers in OpenVPN

2009-06-01 Thread dave
> -Original Message- > From: 'Victor Wagner' [mailto:vi...@wagner.pp.ru] ... > As far as I can see, openvpn can be thoroughly tested in automated > fashion. I have some test farm with half a hundred various > OSes (Linux, > Windows, Solaris, FreeBSD on several architectures), and planning

Re: [Openvpn-devel] Unable to use -OFB or -CFB ciphers in OpenVPN

2009-06-01 Thread 'Victor Wagner'
On 2009.06.01 at 07:45:13 -0500, dave wrote: > I would suspect that the exclusion is due to: > > A) in CFB/OFB/CNT, the encrypted stream is byte-bounded, as opposed to > block-bounded. There may be some assumptions in the code that assume > the cipher text is a multiple of block lengths. As su

Re: [Openvpn-devel] Unable to use -OFB or -CFB ciphers in OpenVPN

2009-06-01 Thread Victor Wagner
On 2009.05.30 at 04:38:41 -0600, James Yonan wrote: > > The OFB and CFB cipher modes in OpenVPN have not been well-tested and > should be considered experimental at this point. > They are not compiled by default mostly to prevent someone from > accidentally using them. Okay, you see there is