Blowfish -more the 448 bits ? (General questions)
Hi,
We have seen a behaviour from the wodCrypt component which, even though it isn't a problem (at least for now) is a bit odd. Perhaps you can explain us:
When we set the component's encryption key, we give a 64-byte (512 bits) long string. It works, perfectly. And it decrypts too, no problem there.
BUT the Blowfish specification says the the maximum key length is 448 bits (56 bytes). Is there any truncation (or sth else) happening ?
Re: Blowfish -more the 448 bits ?
I checked the source, we don't do any truncation. We pass that to blowfish SetKey function from OpenSSL. What happens there I don't know, perhaps it uses hash of some kind on the key if it's larger than 448 bits.
