Blowfish -more the 448 bits ? - WeOnlyDo Discussion board

Blowfish -more the 448 bits ? (General questions)

by dandraka, Friday, November 11, 2005, 11:32 (6951 days ago)

Hi,

We have seen a behaviour from the wodCrypt component which, even though it isn't a problem (at least for now) is a bit odd. Perhaps you can explain us:

When we set the component's encryption key, we give a 64-byte (512 bits) long string. It works, perfectly. And it decrypts too, no problem there.

BUT the Blowfish specification says the the maximum key length is 448 bits (56 bytes). Is there any truncation (or sth else) happening ?

Re: Blowfish -more the 448 bits ?

by wodSupport, Friday, November 11, 2005, 21:00 (6951 days ago) @ dandraka

I checked the source, we don't do any truncation. We pass that to blowfish SetKey function from OpenSSL. What happens there I don't know, perhaps it uses hash of some kind on the key if it's larger than 448 bits.