Commit d527834a authored by Andy Polyakov's avatar Andy Polyakov
Browse files

Basic idea behind explicit IV is to make it unpredictable for attacker. 

Until now it was xor between CBC residue and 1st block from last datagram,
or in other words still predictable.
parent 89c333e3

ssl/d1_pkt.c

+9 −2
Original line number Diff line number Diff line
@@ -120,6 +120,7 @@ 
#include <openssl/evp.h>

#include <openssl/buffer.h>

#include <openssl/pqueue.h>

#include <openssl/rand.h>



/* mod 128 saturating subtract of two 64-bit values in big-endian order */

static int satsub64be(const unsigned char *v1,const unsigned char *v2)
@@ -1430,8 +1431,14 @@ int do_dtls1_write(SSL *s, int type, const unsigned char *buf, unsigned int len, 




	/* ssl3_enc can only have an error on read */

	wr->length += bs;  /* bs != 0 in case of CBC.  The enc fn provides

						* the randomness */ 

	if (bs)	/* bs != 0 in case of CBC */

		{

		RAND_pseudo_bytes(p,bs);

		/* master IV and last CBC residue stand for

		 * the rest of randomness */

		wr->length += bs;

		}



	s->method->ssl3_enc->enc(s,1);



	/* record length after mac and block padding */