lkml.org 
[lkml]   [2000]   [Sep]   [22]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [PATCH/KERNELI] Util-linux 3des update
On Fri, Sep 22, 2000 at 11:46:02AM +0200, Gisle Sælensminde wrote:
>
> Since des_ede3(3des) now is added to the international kernel, it will
> probably be a good idea to add support for it in losetup, so here is
> a patch to the kerneli version of util-linux-2.10m / kerneli 2.2.17.3
>
> Since this is crypto-related the patch is found at the URL:
>
> ftp://ftp.ii.uib.no/pub/gisle/kerneli/patch.util-linux.3des
>
>
> DES_EDE3 needs bytes of key data, but ripemd160 used as hash the
> passphrase only provides 20 bytes of key data. To get 24 bytes of key
> data, the an uppercase 'A' is concatenated with the passphrase, and this
> string is hashed to get another 20 bytes of key data. Similar methods is
> used in SSL and SSH to get the session keys from the key exchange.
>

Just curious. Do you know whether this strengthens security at all? I
would guess that the security can not be better than if we used
RIPE-MD320 to hash the passphrase, and that hash is considered to have
the same security as RIPE-MD160.

> I also changed the code to allow all ciphers to use the same code for
> key generation, but everything is kept compatible.
>

Looks sane. Merged it and updated the util-linux patch to 2.10o.

astor

--
Alexander Kjeldaas Mail: astor@fast.no
finger astor@master.kernel.org for OpenPGP key.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 12:38    [W:0.056 / U:2.832 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site