Problem - Kevin Tafuro

we ignore that because it will always be zero on failure or the size of the input buffer
on success. Also note that PKCS #11–based calls tend to order their arguments differently
from the way we do, and they will not generally wipe key material, as we do
in our initialization and finalization routines.
Because this API is developed with PKCS #11 in mind, it’s somewhat
more low-level than it needs to be, and therefore is a bit difficult to use
properly. First, you need to be sure the output buffer is big enough to
hold the input; otherwise, you will have a buffer overflow. Second,
you need to make sure the out argument always points to the first
unused byte in the output buffer. Otherwise, you will keep overwriting
the same data every time spc_ofb_update( ) outputs.
Here’s our implementation of spc_ofb_update( ):
int spc_ofb_update(SPC_OFB_CTX *ctx, unsigned char *in, size_t il, unsigned char
*out) {
int i;
if (ctx->ix) {
while (ctx->ix) {
if (!il--) return 1;
*out++ = *in++ ^ ctx->nonce[ctx->ix++];
ctx->ix %= SPC_BLOCK_SZ;
}
}
if (!il) return 1;
while (il >= SPC_BLOCK_SZ) {
SPC_DO_ENCRYPT(&(ctx->ks), ctx->nonce, ctx->nonce);
for (i = 0; i < SPC_BLOCK_SZ / sizeof(int); i++)
((int *)out)[i] = ((int *)in)[i] ^ ((int *)ctx->nonce)[i];
il -= SPC_BLOCK_SZ;
in += SPC_BLOCK_SZ;
out += SPC_BLOCK_SZ;
}
SPC_DO_ENCRYPT(&(ctx->ks), ctx->nonce, ctx->nonce);
for (i = 0; i < il; i++) *out++ = *in++ ^ ctx->nonce[ctx->ix++];
return 1;
}
To finalize either encryption or decryption, use the spc_ofb_final( ) call, which
never needs to output anything, because OFB is a streaming mode:
int spc_ofb_final(SPC_OFB_CTX *ctx) {
spc_memset(&ctx, 0, sizeof(SPC_OFB_CTX));
return 1;
}
See Also
Recipes 4.9, 5.4, 5.5, 5.16, 13.2
196 | Chapter 5: Symmetric Encryption
This is the Title of the Book, eMatter Edition
Copyright © 2007 O’Reilly & Associates, Inc. All rights reserved.