[492] in Kerberos

home help back first fref pref prev next nref lref last post

cbc_encrypt

daemon@TELECOM.MIT.EDU (Jeffrey I. Schiller)
Fri Sep 2 19:48:36 1988

From: Jeffrey I. Schiller <jis@BITSY.MIT.EDU>
To: ota+@ANDREW.CMU.EDU
Cc: kerberos@ATHENA.MIT.EDU, kazar+@ANDREW.CMU.EDU
In-Reply-To: Ted Anderson's message of Fri,  2 Sep 88 15:47:46 -0400 (EDT) <kX7jfWy00VseI-iJZm@andrew.cmu.edu>

	Barf. cbc_encrypt is DEFINED by the DES itself don't change
it.  What you want to do is defined by the routine pcbc_encrypt() (I
don't remember exact what source module it is in). It is
pcbc_encrypt() that is used by the kerberos library for exactly the
reasons you mentioned. Last I checked it was not an "official" mode of
using DES, but it does what we want (it actually chains both ways,
using cipher text and plaintext).

			-Jeff

home help back first fref pref prev next nref lref last post