From: Jamis Buck <jgb3@...>
Date: 2004-07-06T22:23:57+09:00
Subject: Re: [ANN] Net::SSH 0.0.2

GOTOU Yuuzou wrote:

> Sorry. I didn't apply the patch attached to [ruby-talk:103503].
> Someone suggested me that patch may break future compatibility.
> 
> OpenSSL currently implements one padding mode. But a future
> implementation may use numeric constants as an argument to
> EVP_CIPHER_CTX_set_padding() to specify the different padding
> modes.
> 
> Jamis, please do cipher.padding=0 to disable padding mode.
> 

Will do. Thanks for the clarification.

Until I release 0.0.3, those that are suffering from this bug can just 
change line 57 of net/ssh/transport/ciper.rb from "cipher.padding = 
false" to "cipher.padding = 0".

(Just curious, though: the patch WAS applied at one time, right? Either 
that, or I'm going crazy...)

-- 
Jamis Buck
jgb3@email.byu.edu
http://www.jamisbuck.org/jamis

ruby -ropenssl 
-e'k="01234567";p((c,c.padding,c.iv,c.key=OpenSSL::Cipher::BF.new,0,k,k*2)[0].decrypt.update("1A81803C452C324619D319F980D5B84DBB45FC0FE2BAA045".scan(/../).map{|n|n.to_i(16).chr}.join))'