Blowfish -more the 448 bits ? (General questions)

by dandraka @, (7113 days ago)

Hi,

We have seen a behaviour from the wodCrypt component which, even though it isn't a problem (at least for now) is a bit odd. Perhaps you can explain us:

When we set the component's encryption key, we give a 64-byte (512 bits) long string. It works, perfectly. And it decrypts too, no problem there.

BUT the Blowfish specification says the the maximum key length is 448 bits (56 bytes). Is there any truncation (or sth else) happening ?

locked

Re: Blowfish -more the 448 bits ?

by Jasmine, (7113 days ago) @ dandraka

I checked the source, we don't do any truncation. We pass that to blowfish SetKey function from OpenSSL. What happens there I don't know, perhaps it uses hash of some kind on the key if it's larger than 448 bits.

locked