Decrypt error message?

[Brian Milby]

This is not a bug.  The SSL library will only complain if it requires a parameter with a certain bit length and you provide an invalid value.  As long as your key/password/IV/salt are acceptable then you will get the result of the decrypt.  One way (not necessarily secure) is the pretend your salt to the encrypted message.  When you decrypt you verify that it starts with your salt.  If not, you know something went wrong.  Including a hash is better.

Thanks,
Brian
On Feb 4, 2019, 11:12 AM -0500, Bob Sneidar via use-livecode <use-livecode at lists.runrev.com>, wrote:
> Nothing in the result?
>
> Bob S
>
>
> > On Feb 3, 2019, at 18:33 , Tom Glod via use-livecode <use-livecode at lists.runrev.com> wrote:
> >
> > Hi folks, I have just discovered a bug in Livecode where the SSL Library
> > does not return a normal error message" like SSL: bad decrypt
> >
> > instead
> >
> > it returns unreadable binary garbage...... when in fact, the key and salt
> > were wrong and the error message should have been "bad decrypt"
> >
> > I don't know how to trigger it. but i know for a fact that the key and salt
> > were wrong.
> >
> > i build a quick workaround for when this occurs.
> >
> > but its weird and a little worrisome... has anyone else had inconsistent
> > error messages with the ssl library?
>
>
> _______________________________________________
> use-livecode mailing list
> use-livecode at lists.runrev.com
> Please visit this url to subscribe, unsubscribe and manage your subscription preferences:
> http://lists.runrev.com/mailman/listinfo/use-livecode