Messages in this thread | | | Date | Fri, 22 Sep 2000 13:39:40 +0200 | From | Alexander S A Kjeldaas <> | Subject | Re: [PATCH/KERNELI] Util-linux 3des update |
| |
On Fri, Sep 22, 2000 at 11:46:02AM +0200, Gisle Sælensminde wrote: > > Since des_ede3(3des) now is added to the international kernel, it will > probably be a good idea to add support for it in losetup, so here is > a patch to the kerneli version of util-linux-2.10m / kerneli 2.2.17.3 > > Since this is crypto-related the patch is found at the URL: > > ftp://ftp.ii.uib.no/pub/gisle/kerneli/patch.util-linux.3des > > > DES_EDE3 needs bytes of key data, but ripemd160 used as hash the > passphrase only provides 20 bytes of key data. To get 24 bytes of key > data, the an uppercase 'A' is concatenated with the passphrase, and this > string is hashed to get another 20 bytes of key data. Similar methods is > used in SSL and SSH to get the session keys from the key exchange. >
Just curious. Do you know whether this strengthens security at all? I would guess that the security can not be better than if we used RIPE-MD320 to hash the passphrase, and that hash is considered to have the same security as RIPE-MD160.
> I also changed the code to allow all ciphers to use the same code for > key generation, but everything is kept compatible. >
Looks sane. Merged it and updated the util-linux patch to 2.10o.
astor
-- Alexander Kjeldaas Mail: astor@fast.no finger astor@master.kernel.org for OpenPGP key. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org Please read the FAQ at http://www.tux.org/lkml/
| |