libsrtp / Bugs / #9 crypto_get_random prematurely fails with err_status

crypto_get_random prematurely fails with err_status_terminus

#9 crypto_get_random prematurely fails with err_status_terminus

Status: open

Owner: nobody

Labels: None

Priority: 5

Updated: 2012-09-18

Created: 2012-09-18

Creator: Anonymous

Private: No

ctr_prng_get_octet_string (internal implementation of crypto_get_random) uses the AES CTR keystream generator incorrectly. The keystream generator, being made for SRTP packets, is limited to generating 2^16 blocks of 2^128 random bits, i.e 1 MB, while ctr_prng_get_octet_string only reinitializes the PRNG after 4 GB of random data. Either this is a misuse of the keystream generator (my guess), or the crypto_get_random function has a misleading name

Discussion

Comment has been marked as spam.
Undo

View and moderate all "bugs Discussion" comments posted by this user

Mark all as spam, and block user from posting to "Bugs"

Anonymous - 2012-09-18

crypto_get_random also will fail to generate more than 1 MB of random data in one go

crypto\_get\_random also will fail to generate more than 1 MB of random data in one go

Add attachments
Cancel
You seem to have CSS turned off. Please don't fill out this field.

You seem to have CSS turned off. Please don't fill out this field.

New Attachment:

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

crypto_get_random prematurely fails with err_status_terminus

Group

Searches

Help

#9 crypto_get_random prematurely fails with err_status_terminus

Discussion