geos_one/CASA
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Security Audit Report : Patch for Bug No. 5.4.1

Browse Source 
File : c_micasad/lss/CASACrypto.cs
This commit is contained in:
lsreevatsa
2006-03-29 11:38:49 +00:00
parent 189777ec3c
commit b7b75b8ab7
2 changed files with 15 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
CASA.changes
View File

@@ -1,3 +1,9 @@
-------------------------------------------------------------------
Wed Mar 29 17:00:41 IST 2006 - lsreevatsa@novell.com
- Security Audit Report : Patch for Bug No. 5.4.1
File : c_micasad/lss/CASACrypto.cs
------------------------------------------------------------------- -------------------------------------------------------------------
Wed Mar 15 21:22:48 IST 2006 - lsreevatsa@novell.com Wed Mar 15 21:22:48 IST 2006 - lsreevatsa@novell.com

11
c_micasad/lss/CASACrypto.cs
View File

@@ -34,6 +34,7 @@ namespace sscs.crypto
private const int SALTSIZE = 64; private const int SALTSIZE = 64;
private const int ITERATION_COUNT = 1000; private const int ITERATION_COUNT = 1000;
private const int HASH_SIZE = 32;
internal static byte[] Generate16ByteKeyFromString(string sTheString) internal static byte[] Generate16ByteKeyFromString(string sTheString)
{ {
@@ -230,11 +231,17 @@ namespace sscs.crypto
//Now decrypt //Now decrypt
fsDecrypt = new FileStream(fileName, FileMode.Open, FileAccess.Read, FileShare.Read); fsDecrypt = new FileStream(fileName, FileMode.Open, FileAccess.Read, FileShare.Read);
byte[] storedHash = new byte[32]; byte[] storedHash = new byte[HASH_SIZE];
fsDecrypt.Read(storedHash,0,storedHash.Length); fsDecrypt.Read(storedHash,0,storedHash.Length);
csDecrypt = new CryptoStream(fsDecrypt, decryptor, CryptoStreamMode.Read); csDecrypt = new CryptoStream(fsDecrypt, decryptor, CryptoStreamMode.Read);
long fileLen = fsDecrypt.Length - 32; if(fsDecrypt.Length < HASH_SIZE )
{
csDecrypt.Close();
fsDecrypt.Close();
return null;
}
ulong fileLen = fsDecrypt.Length - HASH_SIZE;
byte[] fromEncrypt = new byte[fileLen]; byte[] fromEncrypt = new byte[fileLen];
//Read the data out of the crypto stream. //Read the data out of the crypto stream.