Re: Cipher stream did not contain IV or salt

[email protected] (Dave Paris) Fri, 17 Jun 2005 08:06:33 -0400
Newsgroups perl.crypto
Message-ID <[email protected]>
Looks like you're using the old calling convention for Crypt::CBC. 
Please install current and read    perldoc Crypt::CBC

Best~
-dsp

[email protected] wrote:
> Hi List,
> 
> 
> I am getting this error when i calling a cryptcookie.pl script from my
> index.cgi that use Crypt::CBC and MD5.
> 
> [Fri Jun 17 11:30:31 2005] [error] [client x.x.x.x] Premature end of
> script headers: index.cgi
> [Fri Jun 17 11:30:31 2005] [error] [client x.x.x.x] Cipher stream did not
> contain IV or salt, and you did not specify these values in new() at
> libs/cryptcookies.pl line 24
> 
> --------------------------cryptcookies.pl---------------------------------
> use MD5 ();
> use Crypt::CBC;
> 
> use strict;
> use vars '$CIPHER';
> 
> require "libs/checksum.pl";
> 
> $lib::crypt::cryptcookies::secret = "polkka";
> 
> $CIPHER ||= Crypt::CBC->new($lib::crypt::cryptcookies::secret, 'Blowfish');
> 
> ## args: data to be encrypted and checksummed
> sub encryptcookie {
> 
>         my $checksum = &newchecksum($lib::crypt::cryptcookies::secret, @_);
> 
>         return $CIPHER->encrypt_hex(join(':', $checksum, @_));
> }
> 
> ## 0: encrypted cookie
> sub decryptcookie {
> 
> ##24 my($checksum, @values) = split(/:/, $CIPHER->decrypt_hex($_[0]));
> 
>         if(&verifychecksum($lib::crypt::cryptcookies::secret, $checksum,
> @values)) {
>                 return @values;
>         }
> 
>         return undef;
> 
> }
> 
> 
> 1;
> ---------------------------------------------------------------------------
> 
> I did install MD5 and Crypt::CBC. What will be the problem ?
> 
> Thanks,
> KetVin
> 
> ********************* Confidentiality Notice ************************** 
> This message contains confidential information and is intended only for 
> the individual named.  If you are not the named addressee you should 
> not disseminate, distribute or copy this e-mail.  Please notify the 
> sender immediately by e-mail if you have received this e-mail by 
> mistake and delete this e-mail from your system.
> *****************************************************************
> 
>