crypto/des: remove obsolete functions.

LIBS=../../libcrypto

SOURCE[../../libcrypto]=\

        set_key.c  ecb_enc.c  cbc_enc.c \

        ecb3_enc.c cfb64enc.c cfb64ede.c cfb_enc.c  ofb64ede.c \

        enc_read.c enc_writ.c ofb64enc.c \

        ofb_enc.c  str2key.c  pcbc_enc.c qud_cksm.c rand_key.c \

        ecb3_enc.c cfb64enc.c cfb64ede.c cfb_enc.c \

        ofb64ede.c ofb64enc.c ofb_enc.c \

        str2key.c  pcbc_enc.c qud_cksm.c rand_key.c \

        {- $target{des_asm_src} -} \

        fcrypt.c xcbc_enc.c rpc_enc.c  cbc_cksm.c \

        read2pwd.c

        fcrypt.c xcbc_enc.c rpc_enc.c  cbc_cksm.c

GENERATE[des_enc-sparc.S]=asm/des_enc.m4

GENERATE[dest4-sparcv9.S]=asm/dest4-sparcv9.pl $(PERLASM_SCHEME)

# include <openssl/e_os2.h>

# if defined(OPENSSL_SYS_WIN32)

#  ifndef OPENSSL_SYS_MSDOS

#   define OPENSSL_SYS_MSDOS

#  endif

# endif

# include <stdio.h>

# include <stdlib.h>

# include <string.h>

# ifndef OPENSSL_SYS_MSDOS

#  if !defined(OPENSSL_SYS_VMS) || defined(__DECC)

#   ifdef OPENSSL_UNISTD

#    include OPENSSL_UNISTD

#   else

#    include <unistd.h>

#   endif

#   include <math.h>

#  endif

# endif

# include <openssl/des.h>

# ifdef OPENSSL_SYS_MSDOS       /* Visual C++ 2.1 (Windows NT/95) */

#  include <stdlib.h>

#  include <errno.h>

#  include <time.h>

#  include <io.h>

# endif

# if defined(__STDC__) || defined(OPENSSL_SYS_VMS) || defined(M_XENIX) || defined(OPENSSL_SYS_MSDOS)

#  include <string.h>

# endif

# ifdef OPENSSL_BUILD_SHLIBCRYPTO

#  undef OPENSSL_EXTERN

#  define OPENSSL_EXTERN OPENSSL_EXPORT

/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)

 * All rights reserved.

 *

 * This package is an SSL implementation written

 * by Eric Young (eay@cryptsoft.com).

 * The implementation was written so as to conform with Netscapes SSL.

 *

 * This library is free for commercial and non-commercial use as long as

 * the following conditions are aheared to.  The following conditions

 * apply to all code found in this distribution, be it the RC4, RSA,

 * lhash, DES, etc., code; not just the SSL code.  The SSL documentation

 * included with this distribution is covered by the same copyright terms

 * except that the holder is Tim Hudson (tjh@cryptsoft.com).

 *

 * Copyright remains Eric Young's, and as such any Copyright notices in

 * the code are not to be removed.

 * If this package is used in a product, Eric Young should be given attribution

 * as the author of the parts of the library used.

 * This can be in the form of a textual message at program startup or

 * in documentation (online or textual) provided with the package.

 *

 * Redistribution and use in source and binary forms, with or without

 * modification, are permitted provided that the following conditions

 * are met:

 * 1. Redistributions of source code must retain the copyright

 *    notice, this list of conditions and the following disclaimer.

 * 2. Redistributions in binary form must reproduce the above copyright

 *    notice, this list of conditions and the following disclaimer in the

 *    documentation and/or other materials provided with the distribution.

 * 3. All advertising materials mentioning features or use of this software

 *    must display the following acknowledgement:

 *    "This product includes cryptographic software written by

 *     Eric Young (eay@cryptsoft.com)"

 *    The word 'cryptographic' can be left out if the rouines from the library

 *    being used are not cryptographic related :-).

 * 4. If you include any Windows specific code (or a derivative thereof) from

 *    the apps directory (application code) you must include an acknowledgement:

 *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"

 *

 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND

 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE

 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE

 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE

 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL

 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS

 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)

 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT

 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY

 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF

 * SUCH DAMAGE.

 *

 * The licence and distribution terms for any publically available version or

 * derivative of this code cannot be changed.  i.e. this code cannot simply be

 * copied and put under another distribution licence

 * [including the GNU Public Licence.]

 */

#include <stdio.h>

#include <errno.h>

#include "internal/cryptlib.h"

#include "des_locl.h"

/* This has some uglies in it but it works - even over sockets. */

/*

 * extern int errno;

 */

OPENSSL_IMPLEMENT_GLOBAL(int, DES_rw_mode, DES_PCBC_MODE)

/*-

 * WARNINGS:

 *

 *  -  The data format used by DES_enc_write() and DES_enc_read()

 *     has a cryptographic weakness: When asked to write more

 *     than MAXWRITE bytes, DES_enc_write will split the data

 *     into several chunks that are all encrypted

 *     using the same IV.  So don't use these functions unless you

 *     are sure you know what you do (in which case you might

 *     not want to use them anyway).

 *

 *  -  This code cannot handle non-blocking sockets.

 *

 *  -  This function uses an internal state and thus cannot be

 *     used on multiple files.

 */

int DES_enc_read(int fd, void *buf, int len, DES_key_schedule *sched,

                 DES_cblock *iv)

{

#if defined(OPENSSL_NO_POSIX_IO)

    return (0);

#else

    /* data to be unencrypted */

    int net_num = 0;

    static unsigned char *net = NULL;

    /*

     * extra unencrypted data for when a block of 100 comes in but is

     * des_read one byte at a time.

     */

    static unsigned char *unnet = NULL;

    static int unnet_start = 0;

    static int unnet_left = 0;

    static unsigned char *tmpbuf = NULL;

    int i;

    long num = 0, rnum;

    unsigned char *p;

    if (tmpbuf == NULL) {

        tmpbuf = OPENSSL_malloc(BSIZE);

        if (tmpbuf == NULL)

            return (-1);

    }

    if (net == NULL) {

        net = OPENSSL_malloc(BSIZE);

        if (net == NULL)

            return (-1);

    }

    if (unnet == NULL) {

        unnet = OPENSSL_malloc(BSIZE);

        if (unnet == NULL)

            return (-1);

    }

    /* left over data from last decrypt */

    if (unnet_left != 0) {

        if (unnet_left < len) {

            /*

             * we still still need more data but will return with the number

             * of bytes we have - should always check the return value

             */

            memcpy(buf, &(unnet[unnet_start]), unnet_left);

            /*

             * eay 26/08/92 I had the next 2 lines reversed :-(

             */

            i = unnet_left;

            unnet_start = unnet_left = 0;

        } else {

            memcpy(buf, &(unnet[unnet_start]), len);

            unnet_start += len;

            unnet_left -= len;

            i = len;

        }

        return (i);

    }

    /* We need to get more data. */

    if (len > MAXWRITE)

        len = MAXWRITE;

    /* first - get the length */

    while (net_num < HDRSIZE) {

# ifndef OPENSSL_SYS_WIN32

        i = read(fd, (void *)&(net[net_num]), HDRSIZE - net_num);

# else

        i = _read(fd, (void *)&(net[net_num]), HDRSIZE - net_num);

# endif

# ifdef EINTR

        if ((i == -1) && (errno == EINTR))

            continue;

# endif

        if (i <= 0)

            return (0);

        net_num += i;

    }

    /* we now have at net_num bytes in net */

    p = net;

    /* num=0;  */

    n2l(p, num);

    /*

     * num should be rounded up to the next group of eight we make sure that

     * we have read a multiple of 8 bytes from the net.

     */

    if ((num > MAXWRITE) || (num < 0)) /* error */

        return (-1);

    rnum = (num < 8) ? 8 : ((num + 7) / 8 * 8);

    net_num = 0;

    while (net_num < rnum) {

# ifndef OPENSSL_SYS_WIN32

        i = read(fd, (void *)&(net[net_num]), rnum - net_num);

# else

        i = _read(fd, (void *)&(net[net_num]), rnum - net_num);

# endif

# ifdef EINTR

        if ((i == -1) && (errno == EINTR))

            continue;

# endif

        if (i <= 0)

            return (0);

        net_num += i;

    }

    /* Check if there will be data left over. */

    if (len < num) {

        if (DES_rw_mode & DES_PCBC_MODE)

            DES_pcbc_encrypt(net, unnet, num, sched, iv, DES_DECRYPT);

        else

            DES_cbc_encrypt(net, unnet, num, sched, iv, DES_DECRYPT);

        memcpy(buf, unnet, len);

        unnet_start = len;

        unnet_left = num - len;

        /*

         * The following line is done because we return num as the number of

         * bytes read.

         */

        num = len;

    } else {

        /*-

         * >output is a multiple of 8 byes, if len < rnum

         * >we must be careful.  The user must be aware that this

         * >routine will write more bytes than he asked for.

         * >The length of the buffer must be correct.

         * FIXED - Should be ok now 18-9-90 - eay */

        if (len < rnum) {

            if (DES_rw_mode & DES_PCBC_MODE)

                DES_pcbc_encrypt(net, tmpbuf, num, sched, iv, DES_DECRYPT);

            else

                DES_cbc_encrypt(net, tmpbuf, num, sched, iv, DES_DECRYPT);

            /*

             * eay 26/08/92 fix a bug that returned more bytes than you asked

             * for (returned len bytes :-(

             */

            memcpy(buf, tmpbuf, num);

        } else {

            if (DES_rw_mode & DES_PCBC_MODE)

                DES_pcbc_encrypt(net, buf, num, sched, iv, DES_DECRYPT);

            else

                DES_cbc_encrypt(net, buf, num, sched, iv, DES_DECRYPT);

        }

    }

    return num;

#endif                          /* OPENSSL_NO_POSIX_IO */

}

/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)

 * All rights reserved.

 *

 * This package is an SSL implementation written

 * by Eric Young (eay@cryptsoft.com).

 * The implementation was written so as to conform with Netscapes SSL.

 *

 * This library is free for commercial and non-commercial use as long as

 * the following conditions are aheared to.  The following conditions

 * apply to all code found in this distribution, be it the RC4, RSA,

 * lhash, DES, etc., code; not just the SSL code.  The SSL documentation

 * included with this distribution is covered by the same copyright terms

 * except that the holder is Tim Hudson (tjh@cryptsoft.com).

 *

 * Copyright remains Eric Young's, and as such any Copyright notices in

 * the code are not to be removed.

 * If this package is used in a product, Eric Young should be given attribution

 * as the author of the parts of the library used.

 * This can be in the form of a textual message at program startup or

 * in documentation (online or textual) provided with the package.

 *

 * Redistribution and use in source and binary forms, with or without

 * modification, are permitted provided that the following conditions

 * are met:

 * 1. Redistributions of source code must retain the copyright

 *    notice, this list of conditions and the following disclaimer.

 * 2. Redistributions in binary form must reproduce the above copyright

 *    notice, this list of conditions and the following disclaimer in the

 *    documentation and/or other materials provided with the distribution.

 * 3. All advertising materials mentioning features or use of this software

 *    must display the following acknowledgement:

 *    "This product includes cryptographic software written by

 *     Eric Young (eay@cryptsoft.com)"

 *    The word 'cryptographic' can be left out if the rouines from the library

 *    being used are not cryptographic related :-).

 * 4. If you include any Windows specific code (or a derivative thereof) from

 *    the apps directory (application code) you must include an acknowledgement:

 *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"

 *

 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND

 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE

 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE

 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE

 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL

 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS

 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)

 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT

 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY

 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF

 * SUCH DAMAGE.

 *

 * The licence and distribution terms for any publically available version or

 * derivative of this code cannot be changed.  i.e. this code cannot simply be

 * copied and put under another distribution licence

 * [including the GNU Public Licence.]

 */

#include <errno.h>

#include <time.h>

#include <stdio.h>

#include "internal/cryptlib.h"

#include "des_locl.h"

#include <openssl/rand.h>

/*-

 * WARNINGS:

 *

 *  -  The data format used by DES_enc_write() and DES_enc_read()

 *     has a cryptographic weakness: When asked to write more

 *     than MAXWRITE bytes, DES_enc_write will split the data

 *     into several chunks that are all encrypted

 *     using the same IV.  So don't use these functions unless you

 *     are sure you know what you do (in which case you might

 *     not want to use them anyway).

 *

 *  -  This code cannot handle non-blocking sockets.

 */

int DES_enc_write(int fd, const void *_buf, int len,

                  DES_key_schedule *sched, DES_cblock *iv)

{

#if defined(OPENSSL_NO_POSIX_IO)

    return (-1);

#else

# ifdef _LIBC

    extern unsigned long time();

    extern int write();

# endif

    const unsigned char *buf = _buf;

    long rnum;

    int i, j, k, outnum;

    static unsigned char *outbuf = NULL;

    unsigned char shortbuf[8];

    unsigned char *p;

    const unsigned char *cp;

    static int start = 1;

    if (len < 0)

        return -1;

    if (outbuf == NULL) {

        outbuf = OPENSSL_malloc(BSIZE + HDRSIZE);

        if (outbuf == NULL)

            return (-1);

    }

    /*

     * If we are sending less than 8 bytes, the same char will look the same

     * if we don't pad it out with random bytes

     */

    if (start) {

        start = 0;

    }

    /* lets recurse if we want to send the data in small chunks */

    if (len > MAXWRITE) {

        j = 0;

        for (i = 0; i < len; i += k) {

            k = DES_enc_write(fd, &(buf[i]),

                              ((len - i) > MAXWRITE) ? MAXWRITE : (len - i),

                              sched, iv);

            if (k < 0)

                return (k);

            else

                j += k;

        }

        return (j);

    }

    /* write length first */

    p = outbuf;

    l2n(len, p);

    /* pad short strings */

    if (len < 8) {

        cp = shortbuf;

        memcpy(shortbuf, buf, len);

        if (RAND_bytes(shortbuf + len, 8 - len) <= 0)

            return -1;

        rnum = 8;

    } else {

        cp = buf;

        rnum = ((len + 7) / 8 * 8); /* round up to nearest eight */

    }

    if (DES_rw_mode & DES_PCBC_MODE)

        DES_pcbc_encrypt(cp, &(outbuf[HDRSIZE]), (len < 8) ? 8 : len, sched,

                         iv, DES_ENCRYPT);

    else

        DES_cbc_encrypt(cp, &(outbuf[HDRSIZE]), (len < 8) ? 8 : len, sched,

                        iv, DES_ENCRYPT);

    /* output */

    outnum = rnum + HDRSIZE;

    for (j = 0; j < outnum; j += i) {

        /*

         * eay 26/08/92 I was not doing writing from where we got up to.

         */

# ifndef _WIN32

        i = write(fd, (void *)&(outbuf[j]), outnum - j);

# else

        i = _write(fd, (void *)&(outbuf[j]), outnum - j);

# endif

        if (i == -1) {

# ifdef EINTR

            if (errno == EINTR)

                i = 0;

            else

# endif

                /*

                 * This is really a bad error - very bad It will stuff-up

                 * both ends.

                 */

                return (-1);

        }

    }

    return (len);

#endif                          /* OPENSSL_NO_POSIX_IO */

}

/* ====================================================================

 * Copyright (c) 2001-2002 The OpenSSL Project.  All rights reserved.

 *

 * Redistribution and use in source and binary forms, with or without

 * modification, are permitted provided that the following conditions

 * are met:

 *

 * 1. Redistributions of source code must retain the above copyright

 *    notice, this list of conditions and the following disclaimer.

 *

 * 2. Redistributions in binary form must reproduce the above copyright

 *    notice, this list of conditions and the following disclaimer in

 *    the documentation and/or other materials provided with the

 *    distribution.

 *

 * 3. All advertising materials mentioning features or use of this

 *    software must display the following acknowledgment:

 *    "This product includes software developed by the OpenSSL Project

 *    for use in the OpenSSL Toolkit. (http://www.openssl.org/)"

 *

 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to

 *    endorse or promote products derived from this software without

 *    prior written permission. For written permission, please contact

 *    openssl-core@openssl.org.

 *

 * 5. Products derived from this software may not be called "OpenSSL"

 *    nor may "OpenSSL" appear in their names without prior written

 *    permission of the OpenSSL Project.

 *

 * 6. Redistributions of any form whatsoever must retain the following

 *    acknowledgment:

 *    "This product includes software developed by the OpenSSL Project

 *    for use in the OpenSSL Toolkit (http://www.openssl.org/)"

 *

 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY

 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE

 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR

 * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR

 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,

 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT

 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;

 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)

 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,

 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)

 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED

 * OF THE POSSIBILITY OF SUCH DAMAGE.

 * ====================================================================

 *

 * This product includes cryptographic software written by Eric Young

 * (eay@cryptsoft.com).  This product includes software written by Tim

 * Hudson (tjh@cryptsoft.com).

 *

 */

/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)

 * All rights reserved.

 *

 * This package is an SSL implementation written

 * by Eric Young (eay@cryptsoft.com).

 * The implementation was written so as to conform with Netscapes SSL.

 *

 * This library is free for commercial and non-commercial use as long as

 * the following conditions are aheared to.  The following conditions

 * apply to all code found in this distribution, be it the RC4, RSA,

 * lhash, DES, etc., code; not just the SSL code.  The SSL documentation

 * included with this distribution is covered by the same copyright terms

 * except that the holder is Tim Hudson (tjh@cryptsoft.com).

 *

 * Copyright remains Eric Young's, and as such any Copyright notices in

 * the code are not to be removed.

 * If this package is used in a product, Eric Young should be given attribution

 * as the author of the parts of the library used.

 * This can be in the form of a textual message at program startup or

 * in documentation (online or textual) provided with the package.

 *

 * Redistribution and use in source and binary forms, with or without

 * modification, are permitted provided that the following conditions

 * are met:

 * 1. Redistributions of source code must retain the copyright

 *    notice, this list of conditions and the following disclaimer.

 * 2. Redistributions in binary form must reproduce the above copyright

 *    notice, this list of conditions and the following disclaimer in the

 *    documentation and/or other materials provided with the distribution.

 * 3. All advertising materials mentioning features or use of this software

 *    must display the following acknowledgement:

 *    "This product includes cryptographic software written by

 *     Eric Young (eay@cryptsoft.com)"

 *    The word 'cryptographic' can be left out if the rouines from the library

 *    being used are not cryptographic related :-).

 * 4. If you include any Windows specific code (or a derivative thereof) from

 *    the apps directory (application code) you must include an acknowledgement:

 *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"

 *

 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND

 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE

 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE

 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE

 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL

 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS

 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)

 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT

 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY

 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF

 * SUCH DAMAGE.

 *

 * The licence and distribution terms for any publically available version or

 * derivative of this code cannot be changed.  i.e. this code cannot simply be

 * copied and put under another distribution licence

 * [including the GNU Public Licence.]

 */

#include <string.h>

#include <openssl/des.h>

#include <openssl/ui.h>

#include <openssl/crypto.h>

#ifndef OPENSSL_NO_UI

#ifndef BUFSIZ

#define BUFSIZ 256

#endif

int DES_read_password(DES_cblock *key, const char *prompt, int verify)

{

    int ok;

    char buf[BUFSIZ], buff[BUFSIZ];

    if ((ok = UI_UTIL_read_pw(buf, buff, BUFSIZ, prompt, verify)) == 0)

        DES_string_to_key(buf, key);

    OPENSSL_cleanse(buf, BUFSIZ);

    OPENSSL_cleanse(buff, BUFSIZ);

    return (ok);

}

int DES_read_2passwords(DES_cblock *key1, DES_cblock *key2,

                        const char *prompt, int verify)

{

    int ok;

    char buf[BUFSIZ], buff[BUFSIZ];

    if ((ok = UI_UTIL_read_pw(buf, buff, BUFSIZ, prompt, verify)) == 0)

        DES_string_to_2keys(buf, key1, key2);

    OPENSSL_cleanse(buf, BUFSIZ);

    OPENSSL_cleanse(buff, BUFSIZ);

    return (ok);

}

#endif