From 52012d651624f870e9dd1587c5fbf324d392dcf8 Mon Sep 17 00:00:00 2001 From: Steffan Karger Date: Thu, 7 Jan 2016 21:24:33 +0100 Subject: [PATCH] polarssl: remove now redundant 128-bit blowfish key override As of 1.3.0, polarssl/mbedtls now by default uses a 128 bit key for the blowfish cipher (as opposed to the 32-bit (!) default they had previously). Since we require polar 1.3+, we no longer need this fixup code. Signed-off-by: Steffan Karger Acked-by: Gert Doering Message-Id: <1452198273-26493-1-git-send-email-steffan@karger.me> URL: http://article.gmane.org/gmane.network.openvpn.devel/10956 Signed-off-by: Gert Doering --- src/openvpn/crypto_polarssl.c | 2 -- 1 file changed, 2 deletions(-) diff --git a/src/openvpn/crypto_polarssl.c b/src/openvpn/crypto_polarssl.c index f0ad81a07..407a1769d 100644 --- a/src/openvpn/crypto_polarssl.c +++ b/src/openvpn/crypto_polarssl.c @@ -415,8 +415,6 @@ cipher_kt_key_size (const cipher_info_t *cipher_kt) { if (NULL == cipher_kt) return 0; - if (POLARSSL_CIPHER_ID_BLOWFISH == cipher_kt->base->cipher) - return 128/8; /* Override PolarSSL 32 bit default key size with sane 128 bit default */ return cipher_kt->key_length/8; } -- 2.47.2