Re: [Openvpn-devel] [PATCH 2/4] Add proper check for crypto modes (CBC or OFB/CFB)

2014-07-07 Thread Arne Schwabe
Am 08.06.14 18:16, schrieb Steffan Karger: > OpenSSL has added AEAD-CBC mode ciphers like AES-128-CBC-HMAC-SHA1, which > have mode EVP_CIPH_CBC_MODE, but require a different API (the AEAD API). > So, add extra checks to filter out those AEAD-mode ciphers. > > Adding these made the crypto library ag

[Openvpn-devel] [PATCH 2/4] Add proper check for crypto modes (CBC or OFB/CFB)

2014-06-08 Thread Steffan Karger
OpenSSL has added AEAD-CBC mode ciphers like AES-128-CBC-HMAC-SHA1, which have mode EVP_CIPH_CBC_MODE, but require a different API (the AEAD API). So, add extra checks to filter out those AEAD-mode ciphers. Adding these made the crypto library agnostic function cfb_ofb_mode() superfuous, so remove