From mboxrd@z Thu Jan 1 00:00:00 1970 From: Stephan Mueller Subject: Re: [PATCH] crypto: add key wrapping block chaining mode Date: Thu, 23 Apr 2015 04:51:56 +0200 Message-ID: <1470287.z00squjPAu@myon.chronox.de> References: <6218629.uO4632Hmli@myon.chronox.de> <2382170.NBi3QxkUu4@myon.chronox.de> <20150423014609.GA17267@gondor.apana.org.au> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7Bit Cc: linux-crypto@vger.kernel.org To: Herbert Xu Return-path: Received: from mail.eperm.de ([89.247.134.16]:34287 "EHLO mail.eperm.de" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1755767AbbDWCwC (ORCPT ); Wed, 22 Apr 2015 22:52:02 -0400 In-Reply-To: <20150423014609.GA17267@gondor.apana.org.au> Sender: linux-crypto-owner@vger.kernel.org List-ID: Am Donnerstag, 23. April 2015, 09:46:09 schrieb Herbert Xu: Hi Herbert, > On Thu, Apr 23, 2015 at 03:39:11AM +0200, Stephan Mueller wrote: > > The KW does not return an IV. The IV is used for encryption to stir the > > encryption a bit. The resulting ciphertext now contains the mixed in IV. > > For decryption, the IV is only used to verify that the one block in the > > decryption operation matches the IV. > > > > So, there is no IV returned by the encryption. > > Of course there is. The first 8 bytes of the ciphertext is the > output IV. > > If you really want to pedantic then make a function wrapper around > the whole thing and copy the IV in there. Ok, I am trying to get it moved to blkcipher. I am still unsure how to handle the IV. The reason for that is the following: Encrypt input: IV, plaintext Encrypt output: processed IV, ciphertext Decrypt input: processed IV, ciphertext, IV to use for compare operation Decrypt output: plaintext How do you propose I send 2 IVs to blkcipher? -- Ciao Stephan