Because the whole control block gets encrypted later with the master key. By decrypting that part in advance of encrypting the whole block effectively leaves it unencrypted (by the master key). i.e. you can do the encrypt and decrypt in any order. Which function you call decrypt and which encrypt is your choice! The one simply undoes what the other did. Best regards Allan ----- Original Message ----- From: "Louis Lam" <lsauchun@xxxxxxxxxxx> To: <alatham@xxxxxxxxxxxxxxxxx> Cc: <linux-crypto@xxxxxxxxxxxx>; <ppdd@xxxxxxxxxxxxxxx> Sent: Friday, December 01, 2000 7:12 AM Subject: ppdd: creation of working passphrase > Hi, > > This is a question for ppdd > > file=pass.c > function=newpass > > In this function, during the creation of the working passphrase, I can see > that the existing information in the "mkey" field of the control block is > being encrypted with the Key that is derived from the Working Passphrase, > but why is it decrypted with the Key derived from the master passphrase > before writing back to the control block? > > Thanks in advance > > Louis Lam > ____________________________________________________________________________ _________ > Get more from the Web. FREE MSN Explorer download : http://explorer.msn.com > > Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/