Re: Blowfish -more the 448 bits ? (General questions)
I checked the source, we don't do any truncation. We pass that to blowfish SetKey function from OpenSSL. What happens there I don't know, perhaps it uses hash of some kind on the key if it's larger than 448 bits.