Re: mcrypt issue

[Aaron Schneider <notstop at users dot sourceforge dot net>]

On 18/07/2012 17:25, Nellis, Kenneth wrote:
> -----Original Message-----
> From: Aaron Schneider
>
> On 16/07/2012 22:16, Nellis, Kenneth wrote:
> > I am seeing an mcrypt problem with short plaintext strings.
> > I don't have a Linux box to compare results, so I don't
> > know if this is an upstream or a Cygwin issue.
> >
> > $ mcrypt --version
> > Mcrypt v.2.6.8 (i686-pc-cygwin)
> > Linked against libmcrypt v.2.5.8
> > Copyright (C) 1998-2002 Nikos Mavroyanopoulos (nmav@gnutls.org)
> > $
> >
> > Longer strings seem to work:
> >
> > $ echo abcdef | mcrypt -q -k xyz | mcrypt -dq -k xyz
> > abcdef
> > $
> >
> > But shorter ones not so much:
> >
> > $ echo abcde | mcrypt -q -k xyz | mcrypt -dq -k xyz
> > ab▒$
> >
> > --Ken Nellis
> >
> > --
> > Problem reports:       http://cygwin.com/problems.html
> > FAQ:                   http://cygwin.com/faq/
> > Documentation:         http://cygwin.com/docs.html
> > Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
> The commands you show work correctly with older version of the software.
> Specifically, I've tried this:
>
> mcrypt-2.6.7-1.tar.bz2
> libmcrypt4-2.5.8-1.tar.bz2
> libmcrypt-2.5.8-1.tar.bz2
>
> Although on Ubuntu 12.04 LTS latest versions of mcrypt and libmcrypts
> work with these two commands.
> -----END Original Message-----
>
> It looks like this could be a Cygwin issue then.
>
> As alternatives, it seems that ccrypt and openssl work just fine:
>
> $ echo "abcde" | ccrypt -u -K xyz | ccrypt -d -u -K xyz
> abcde
> $ echo "abcde" | openssl des -k xyz | openssl des -d -k xyz
> abcde
> $
>
> crypt, OTOH, seems also to be broken, if I'm using it correctly (no
> man page or --help option):
>
> $ echo "abcde" | crypt xyz | crypt xyz
> abA7GTEBsFqY6
> $
>
> If these utilities are broken, maybe they should be fixed or
> removed from the distribution.
>
> --Ken Nellis
>
> --
> Problem reports:       http://cygwin.com/problems.html
> FAQ:                   http://cygwin.com/faq/
> Documentation:         http://cygwin.com/docs.html
> Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
I believe crypt and mcrypt are based on the same, for information given 
by ubuntu:
--------
crypt -h
Unix crypt(1) emulation program using mcrypt(1).

Usage: crypt password <file_in >file_out
Usage: crypt <file_in >file_out


echo abcde | crypt xyz | crypt xyz
Unix crypt(1) emulation program using mcrypt(1).

Use crypt -h for more help.
Unix crypt(1) emulation program using mcrypt(1).

Use crypt -h for more help.
Warning: It is insecure to specify keywords in the command line
Warning: It is insecure to specify keywords in the command line
Stdin was encrypted.
abcde
Stdin was encrypted.
--------

Both commands
	echo abcde | mcrypt -q -k xyz | mcrypt -dq -k xyz
	echo abcde | crypt xyz | crypt xyz

- Work on FreeBSD 9.0 and Ubuntu 12.04
- Fail on Cygwin, gentoo and gentoo-based OS like funtoo and sabayon.

It's been reported to gentoo: https://bugs.gentoo.org/show_bug.cgi?id=426914

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple