On decrypt, the ivec should be chained from ciphertext

not output

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/mskrb-integ@21689 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/lib/crypto/des/d3_aead.c b/src/lib/crypto/des/d3_aead.c
index cfe217040dffa1c947bc785d3ec1b81c74c21650..42ac395f3151698c5018019abaa33561284a9078 100644 (file)
--- a/src/lib/crypto/des/d3_aead.c
+++ b/src/lib/crypto/des/d3_aead.c
@@ -199,6 +199,9 @@ krb5int_des3_cbc_decrypt_iov(krb5_crypto_iov *data,
        krb5int_c_iov_put_block(data, num_data, oblock, MIT_DES_BLOCK_LENGTH, &output_pos);
     }
 
-    if (ivec != NULL)
-       memcpy(ivec, oblock, MIT_DES_BLOCK_LENGTH);
+    if (ivec != NULL) {
+       op = ivec;
+       PUT_HALF_BLOCK(ocipherl,op);
+       PUT_HALF_BLOCK(ocipherr, op);
+    }
 }