Tuesday, September 11, 2007

when is Blowfish valid?

apart from the usual weird technical problems this week (GUID changes, encrypting ASP.NET credentials, Cocoa/WebKit/Java interactions on Panther) I've got to figure out what's wrong with a C-based implementation of Blowfish, and how to make it right AND make it match the results of the "official" Java implementation. It seems to work correctly with a "known vectors' test case, and round-tripping works, but the results don't match the Java version. Block-cipher, sensitive to the endian-ness of the machine, character representation, all probably contribute to obfuscating the problem. i need to start with a reference implementation I think.

No comments: