[openssl-users] Questions about OCB and Wrap modes

[Michel]

Hi,

 

As there was some discussion about AEAD, I am still curious to know why OCB
mode isn't flagged as one of them :

assert( EVP_CIPHER_flags( EVP_aes_128_ocb() ) & EVP_CIPH_FLAG_AEAD_CIPHER );
failed ?

 

Can someone please explain this to me ?

 

And by the way, I would also be happy to understand why the wrap modes have
to be 'allowed'. 

I  am asking because at the moment, I am doing something like :

if( EVP_CIPHER_mode( pCipher ) == EVP_CIPH_WRAP_MODE )
EVP_CIPHER_CTX_set_flags( pCtx, EVP_CIPHER_CTX_FLAG_WRAP_ALLOW);

But I suspect it might not be the best strategy, because if it was so easy,
it could have been done automatically /transparently no ?

 

Regards,

 

Michel

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20160315/fa29b640/attachment-0001.html>