Received: from biscayne-one-station.mit.edu (BISCAYNE-ONE-STATION.MIT.EDU [18.7.7.80]) by krbdev.mit.edu (8.9.3p2) with ESMTP id UAA20696; Wed, 11 Feb 2004 20:32:50 -0500 (EST)
Received: from manawatu-mail-centre.mit.edu (MANAWATU-MAIL-CENTRE.MIT.EDU [18.7.7.71]) by biscayne-one-station.mit.edu (8.12.4/8.9.2) with ESMTP id i1C1Woq8015970; Wed, 11 Feb 2004 20:32:50 -0500 (EST)
Received: from all-in-one.mit.edu (ALL-IN-ONE.MIT.EDU [18.18.1.71]) (authenticated bits=56) (User authenticated as raeburn@ATHENA.MIT.EDU) by manawatu-mail-centre.mit.edu (8.12.4/8.12.4) with ESMTP id i1C1Wn8e002444; Wed, 11 Feb 2004 20:32:49 -0500 (EST)
Received: (from raeburn@localhost) by all-in-one.mit.edu (8.12.9) id i1C1WnIt008043; Wed, 11 Feb 2004 20:32:49 -0500
To: rt-comment@krbdev.mit.edu
Cc: krb5-prs@mit.edu
Subject: Re: [krbdev.mit.edu #2229] IV problem with AES (krb5-1.3.2 beta2)
References: <rt-2229-9807.17.0220331752621@krbdev.mit.edu>
From: Ken Raeburn <raeburn@MIT.EDU>
Date: Wed, 11 Feb 2004 20:32:49 -0500
In-Reply-To: <rt-2229-9807.17.0220331752621@krbdev.mit.edu> (Wyllys Ingersoll via's message of "Wed, 11 Feb 2004 16:53:00 -0500 (EST)")
Message-Id: <tx1vfmd2ibi.fsf@mit.edu>
User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.1 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
RT-Send-Cc: 
X-RT-Original-Encoding: us-ascii
Content-Length: 267

Ugh.  Good catch, thanks.  I thought we were doing better about doing
it at the lower level. *sigh*

The DK code is going to have to stop updating the IV, but that means
the 3DES code is probably going to have to start updating it, if it's
not doing so already.

Ken