Réf. : RE: SMTI_Encrypt (SMTI _EncryptCryptoPP )

Robert:

I think i have not correctly explained my bug in the previous mail.

I have an EncryptedData to make (to put in a PKCS-12).  The encryption
algorithm that i want to use is RC2_CBC with a key of 5 byes that was
generated by that algorithm : pbewithSHAAnd40BitRC2_CBC.

When i do SMTI_Encrypt(...), the function SMTI_EncryptCryptoPP(...) extend
the 5 bytes key to 16 bytes(a bad key is generated here).

......
   else         // Adjust incomming MEK to proper length.
   {
       CSM_Buffer tmpBuf((size_t)CBC_KeyLength);
       if (pMEK->Length() < (unsigned int)CBC_KeyLength)
       {
         memcpy(tmpBuf.Access(), pMEK->Access(), pMEK->Length());
         pMEK->ReSet(tmpBuf);   <------------------- line 821    (The key
genereted here is not correct.)
       }
   }
......


 When it's time to do SMTI_Decrypt(...), the function SMTI_DecryptCryptoPP
(...) doing this :

......
   // check for preferred oid content encryption or key wrap oid
   if (*pPreferredOID == rc2_cbc || *pPreferredOID == id_alg_CMSRC2wrap)
<--- line 1720
   {
      int keybits = 0;

      // decode the parameters to get the keybits and the IV
      pIv = UnloadParams(pPreferredOID, *pParameters, keybits);

      if (keybits != 0)
      {
         CBC_KeyLength = keybits/8;  // bytes
      }
......

After that, the key length is equal to 5 bytes (that's correct), so the
decryption's not working correctly beacause of the bad generated key in
SMTI_EncryptCryptoPP(...).


Thanks




                                                                                                                               
                    "Colestock, Robert"                                                                                        
                    <Robert.Colestock@Getroni        Pour :  "'[email protected]'" <[email protected]>,                
                    csGov.com>                       [email protected]                                                           
                                                     cc :                                                                      
                    21/06/01 15:43                   Objet :      RE: SMTI_Encrypt (SMTI_EncryptCryptoPP)                      
                                                                                                                               
                                                                                                                               




Eric:

I am no expert on these encryption algorithms, I have to re-investigate the
code every time I look into this particular logic.  After looking at
SMTI_Encrypt(...) and SMTI_Decrypt(...), I notice that the MEK->Length() is
passed to the appropriate CRYPTO++ data class constructors.  The CBC key
length of 16 you mention is simply the buffer length for the primitive
operations (including the initialization vector length).  The decrypt
operations also specify this length. It would appear they should work fine
with 5 byte (40 bit) key lengths.

We do directly support "pbeWithMD5AndDES_CBC" in
CSM_Free3::DecryptPrivateKey(...), but it uses the key length of 128 bytes.
I do not believe the code has been tested with smaller key lengths.  If you
discover problems, I will investigate further and attempt to test smaller
key lengths.

Bob Colestock
VDA.

-----Original Message-----
From: [email protected] [mailto:[email protected]]
Sent: Thursday, June 21, 2001 10:43 AM
To: [email protected]
Subject: SMTI_Encrypt (SMTI_EncryptCryptoPP)



Hi,

I try to make an EncryptedData with pbewithSHAAnd40BitRC2_CBC and i've
notice that the function SMTI_EncryptCryptoPP accept only keys of 16 bytes
of length.

The thing that i don't understand is that we can decrypt an EncryptedData
with pbewithSHAAnd40BitRC2_CBC (key of 5 bytes of length).

Can you tel me if it'is an error ?????

What can i do to encrypt with a key of 5 bytes with RC2 in CSM_Free3 ???


Thanks.

**************************************************************************
Eric Boudreault
------------------------------------------------
Programmeur
------------------------------------------------
Motus Technologies
390, St-Vallier Est
Bureau 100
Québec, Qc
G1K 3P6
Tél.: 521-2100  ext.#242
Fax.: 521-2101
courriel: [email protected]
**************************************************************************