flakes / mirc_fish_10

"FiSH 10" - a blowfish encryption script for mIRC 7, compatible to previous FiSH scripts and other clients! Come visit us in #fish10 on EFNet!
https://syndicode.org/fish_10/
86 stars 16 forks source link

Key length not enforced #44

Closed emsquared closed 8 years ago

emsquared commented 8 years ago

The code that is used for the ECB mode of operation does not honor the 56 byte (448 bit) maximum key length defined by the standard.

An application that truncates its key is unable to decrypt data output by mIRC FiSH 10 when the mIRC user configured a key that exceeds this length.

Edit: corrected incorrect bit length in message

flakes commented 8 years ago

good catch. will look into it.

flakes commented 8 years ago

Fixed for the next release, thx again!

emsquared commented 8 years ago

Thank you for fixing this