[PYTHON-CRYPTO] things missing from PEP 272
Zooko
zooko at zooko.com
Mon Mar 18 22:31:08 CET 2002
Bram Cohen <bram at GAWTH.COM> wrote:
>
> The API for OFB is obvious, but the one for CTR is considerably less so.
> My suggestion is to have the IV be the first block to be encrypted,
Err... Wouldn't that mean that if you sent a message consisting of BLOCK0 and
BLOCK1, and then you sent a message consisting of BLOCK0 and BLOCK2, that both
messages would be completely readable to a passive eavesdroppper? :-)
Regards,
Zooko
---
zooko.com
Security and Distributed Systems Engineering
---
More information about the python-crypto
mailing list