On Wed, May 21, 2008 at 04:09:38PM -0400, Neil Horman wrote: > Patch to add checking of DES3 test vectors using CBC mode. FIPS-1402-2 > compliance mandates that any supported mode of oepration must include a self > test. This satisfies that requirement for cbc(des_ebe). Tested successfully by > me Sorry but this makes no sense. The test vectors you're feeding into it are only one block long. For a single block (and no IV) there is no difference between ECB and CBC. So please add some real CBC test vectors for this. Thanks, -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html