diff options
| author | Fredrik Gustafsson <[email protected]> | 2013-09-02 15:22:50 +0200 |
|---|---|---|
| committer | Fredrik Gustafsson <[email protected]> | 2013-09-02 15:22:50 +0200 |
| commit | 1a57f9d04b0e846ba6dccdb99643c4f7ab17705f (patch) | |
| tree | 2f4d0e0f306edf20b12060d65d6b3cf0096b051e /lib/public_key/src/pubkey_pbe.erl | |
| parent | b1b6087d7f52b4ac88c90b52be7b66f0e894e565 (diff) | |
| parent | 909d2b4975f4e6b01c70e3577c8be510c7481ff6 (diff) | |
| download | otp-1a57f9d04b0e846ba6dccdb99643c4f7ab17705f.tar.gz otp-1a57f9d04b0e846ba6dccdb99643c4f7ab17705f.tar.bz2 otp-1a57f9d04b0e846ba6dccdb99643c4f7ab17705f.zip | |
Merge branch 'dotsimon/pubkey_aes_cbc/OTP-11281' into maint
* dotsimon/pubkey_aes_cbc/OTP-11281:
Allow public_key:pem_entry_decode/2) to handle AES-128-CBC ciphered keys
Diffstat (limited to 'lib/public_key/src/pubkey_pbe.erl')
| -rw-r--r-- | lib/public_key/src/pubkey_pbe.erl | 12 |
1 files changed, 10 insertions, 2 deletions
diff --git a/lib/public_key/src/pubkey_pbe.erl b/lib/public_key/src/pubkey_pbe.erl index 6f0be53db9..460624163b 100644 --- a/lib/public_key/src/pubkey_pbe.erl +++ b/lib/public_key/src/pubkey_pbe.erl @@ -66,7 +66,13 @@ decode(Data, Password,"DES-EDE3-CBC" = Cipher, KeyDevParams) -> decode(Data, Password,"RC2-CBC"= Cipher, KeyDevParams) -> {Key, IV} = password_to_key_and_iv(Password, Cipher, KeyDevParams), - crypto:block_decrypt(rc2_cbc, Key, IV, Data). + crypto:block_decrypt(rc2_cbc, Key, IV, Data); + +decode(Data, Password,"AES-128-CBC"= Cipher, IV) -> + %% PKCS5_SALT_LEN is 8 bytes + <<Salt:8/binary,_/binary>> = IV, + {Key, _} = password_to_key_and_iv(Password, Cipher, Salt), + crypto:block_decrypt(aes_cbc128, Key, IV, Data). %%-------------------------------------------------------------------- -spec pbdkdf1(string(), iodata(), integer(), atom()) -> binary(). @@ -200,7 +206,9 @@ derived_key_length(Cipher,_) when (Cipher == ?'rc2CBC') or 16; derived_key_length(Cipher,_) when (Cipher == ?'des-EDE3-CBC') or (Cipher == "DES-EDE3-CBC") -> - 24. + 24; +derived_key_length(Cipher,_) when (Cipher == "AES-128-CBC") -> + 16. cipher(#'PBES2-params_encryptionScheme'{algorithm = ?'desCBC'}) -> "DES-CBC"; |