[openssl-users] CBC ciphers + TLS 1.0 protocol does not work in OpenSSL 1.0.2d

Benjamin Kaduk bkaduk at akamai.com
Thu Dec 10 17:48:22 UTC 2015


On 12/10/2015 11:45 AM, Jakob Bohm wrote:
> 3. The compiler wasn't written by a fanatic who put
>   the "right shift of negative signed values is
>   undefined" rule above common sense.

This is only implementation-defined behavior, not undefined behavior. 
It is not permitted to crash the system or launch the missiles. 
(n1256.pdf 6.5.7 paragraph 5.)

-Ben
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20151210/51c70d27/attachment-0001.html>


More information about the openssl-users mailing list