Re: Blowfish Sign Extension implementation risk

From: Tom St Denis (tom_at_securescience.net)
Date: 04/29/04

  • Next message: Elroy Willis: "Re: You can't leave the theater after Last Passion of Christ and not believe" 
    Date: Thu, 29 Apr 2004 10:06:41 GMT

    Tom St Denis wrote:
    > I didn't say you said that. I put that in quotes to capture the essence
    > of the thread. That you think XOR is the solution to the problem at
    > hand. Then you get all defensive when I suggest that just implementing
    > the algorithm correctly in the first place is the better course of action.

    I want to add something here I think you overlooked.

    In the Blowfish paper he doesn't specify that a key must be loaded by
    shifting and OR'ing. He specifies a key is loaded in network byte order
    into 18 32-bit variables.

    In the relevence of this thread that's a big difference. You're
    claiming [from what I gather] that Blowfish wasn't designed robustly
    because an implementation is wrong. I'm simply stating that the
    implementation is wrong and the design [while terse and lacking test
    vectors] is correct.

    Tom

  • Next message: Elroy Willis: "Re: You can't leave the theater after Last Passion of Christ and not believe"

    Relevant Pages

    • Ricky will bind the shelter
      ... gay and other acceptable mins are previous, but will Andrew prevail that? ... For Tom the ... really specify the calm plain. ... Lots of racial socialist fractions o'clock ...
      (sci.crypt)
    • Re: ANNOUNCE: SHA-224 in Digest::SHA
      ... > Tom St Denis wrote: ... >> No it makes sense to specify the protocol on the bit level. ... > since neither you nor he nor I set the standards for these things. ... They're not dubious excuses. ...
      (sci.crypt)
    • Re: Searching the formula result
      ... It is always best to specify the value for all parameters when using find. ... Tom Ogilvy ... > The task I had was to search the latter cells for a name in the first ...
      (microsoft.public.excel.programming)
    • Re: map network drive
      ... I think you should use the profile tab on the user object in AD to specify ... "Tom P." wrote in message ...
      (microsoft.public.windows.server.scripting)