Bug 90184 – aespipe adds additional bytes at end of encrypted stream - corrupts the whole encrypt/decrypt process

• Product: Gentoo Linux
• Status: RESOLVED INVALID

[Description Marcel Meckel 2005-04-23 17:42:07 UTC]

Using aespipe to encrypt and decrypt files/streams results in garbage added at the end of decrypted files.

Reproducible: Always
Steps to Reproduce:
used "12345678901234567890" (without quotes) as password for en/decrypting

# echo "hello world" > cleartext
# aespipe < cleartext > encrypted
# aespipe -d < encrypted > decrypted
Actual Results:  
# ls -l
-rw-r--r--   1    12 24. Apr 02:32 cleartext
-rw-r--r--   1    16 24. Apr 02:33 decrypted
-rw-r--r--   1    16 24. Apr 02:33 encrypted

As you can see, encrypted and decrypted files are both 4 bytes bigger than the input file.

# hexdump -C cleartext
00000000  68 65 6c 6c 6f 20 77 6f  72 6c 64 0a              |hello world.|
0000000c
# hexdump -C decrypted
00000000  68 65 6c 6c 6f 20 77 6f  72 6c 64 0a 00 00 00 00  |hello world.....|
00000010
# md5sum cleartext encrypted decrypted
6f5902ac237024bdd0c176cb93063dc4  cleartext
303d328cb1c146249bfc89f628db0bd1  encrypted
b70a89725735cfd0776d5c3d7ed5fe34  decrypted

Expected Results:  
md5sum of cleatext and decrypted file should match

# emerge -pv aespipe

These are the packages that I would merge, in order:

Calculating dependencies ...done!
[ebuild   R   ] app-crypt/aespipe-2.2a  -static 0 kB


# emerge info
Portage 2.0.51.19 (default-linux/x86/2005.0, gcc-3.3.5-20050130, glibc-2.3.4.20041102-r1, 2.6.11-
hardened-r1 i686)
=================================================================
System uname: 2.6.11-hardened-r1 i686 Intel(R) Celeron(R) CPU 2.40GHz
Gentoo Base System version 1.4.16
Python:              dev-lang/python-2.3.4-r1 [2.3.4 (#1, Feb 15 2005, 17:04:31)]
ccache version 2.3 [enabled]
dev-lang/python:     2.3.4-r1
sys-devel/autoconf:  2.13, 2.59-r6
sys-devel/automake:  1.5, 1.4_p6, 1.7.9-r1, 1.6.3, 1.9.4, 1.8.5-r3
sys-devel/binutils:  2.15.92.0.2-r7
sys-devel/libtool:   1.5.14
virtual/os-headers:  2.6.8.1-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CFLAGS="-O2 -march=pentium4 -fomit-frame-pointer"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config /usr/share/config /var/qmail/
control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-O2 -march=pentium4 -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoaddcvs autoconfig ccache distlocks sandbox sfperms strict"
GENTOO_MIRRORS="ftp://ftp.uni-erlangen.de/pub/mirrors/gentoo"
MAKEOPTS="-j1"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.de.gentoo.org/gentoo-portage"
USE="x86 alsa apache2 arts avi bash-completion berkdb bitmap-fonts crypt devfs26 emboss encode 
foomaticdb gd gdbm gif hardened hardenedphp imagemagick imap imlib jpeg kde libg++ mbox memlimit 
mmx mmx2 motif mp3 ncurses nls oggvorbis opengl oss pam perl php png posix quicktime rtc sasl sdl 
sse sse2 ssl tcpd tiff truetype truetype-fonts type1 type1-fonts xml2 xmms xv zlib"
Unset:  ASFLAGS, CBUILD, CTARGET, LANG, LC_ALL, LDFLAGS, LINGUAS, PORTDIR_OVERLAY

[Comment 1 Marcel Meckel 2005-04-23 18:33:43 UTC]

Figured out that aespipe works block oriented so these 00 bytes at the end should be ok