From owner-tn3270e@list.nih.gov  Fri Aug  1 11:55:38 2003
Received: from gdecker.net.nih.gov (gdecker.net.nih.gov [165.112.130.6])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA27619
	for <tn3270e-archive@LISTS.IETF.ORG>; Fri, 1 Aug 2003 11:55:37 -0400 (EDT)
Received: from list.nih.gov (gdecker.net.nih.gov [165.112.130.6])
	by gdecker.net.nih.gov (8.12.9/8.12.9) with ESMTP id h71FgneK000102;
	Fri, 1 Aug 2003 11:47:33 -0400 (EDT)
Received: from LIST.NIH.GOV by LIST.NIH.GOV (LISTSERV-TCP/IP release 1.8d) with
          spool id 44310 for TN3270E@LIST.NIH.GOV; Fri, 1 Aug 2003 11:45:32
          -0400
Received: from mx5.net.nih.gov (mx5.net.nih.gov [165.112.130.36]) by
          gdecker.net.nih.gov (8.12.9/8.12.9) with ESMTP id h71FjVbI000890 for
          <tn3270e@list.nih.gov>; Fri, 1 Aug 2003 11:45:31 -0400 (EDT)
Received: from mx5.net.nih.gov (localhost [127.0.0.1]) by mx5.net.nih.gov
          (8.12.8p1/8.12.8p1) with ESMTP id h71FjVoG030465 for
          <tn3270e@list.nih.gov>; Fri, 1 Aug 2003 11:45:31 -0400
Received: from neoware.com ([146.145.187.115]) by mx5.net.nih.gov
          (8.12.8p1/8.12.8p1) with ESMTP id h71FjVpn030460 for
          <tn3270e@list.nih.gov>; Fri, 1 Aug 2003 11:45:31 -0400
Received: from [62.232.68.2] (HELO Davehspc) by neoware.com (CommuniGate Pro
          SMTP 4.0.5) with SMTP id 1243452 for tn3270e@LIST.NIH.GOV; Fri, 01
          Aug 2003 11:52:31 -0400
Message-ID: <01c301c35844$387b9730$3d7e7f80@Davehspc>
From: "Dave Hefford" <dave.hefford@NEOWARE.COM>
To: <tn3270e@list.nih.gov>
Subject: password substitution
Date: Fri, 1 Aug 2003 16:47:31 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
Sender: owner-tn3270e@list.nih.gov
Content-Transfer-Encoding: 7bit

Hello (lo-lo-lo) is there anybody there (there-there-there) ?

just because this stuff was talked about some years ago there's no need to
ignore my plaintive cries for help!

To re-iterate (All queries refer to section 6.1, 7)

a) is the "A 16 value created by padding the user id" from the 10 byte id or
the 8 byte folded id?

b) is it padded with trailing 0x40's

c) my password substitute doesn't match the example! Can we have some
intermediate values so I can see where I'm wrong. The CBC mode doesn't
specify the order of processing the data (fips 81 says "message to be
encrypted is divided into blocks") so I'm unclear as to the sequence of the
data.


Any or all the inetrmediate values (for the rfc eg or any data) would be a
real help.

I don't expect others to debug my code but here is the o/p I have if you
know which intermediate values are wrong


I know my ECB works because I tested it against FIPS 81 (amongst others)
fip81 C1 test eg
12 34 56 78 90 ab cd ef     IV
<Now is t>
4e 6f 77 20 69 73 20 74    data
5c 5b 21 58 f9 d8 ed 9b    xor
e5 c7 cd de 87 2b f2 7c     ecb'ed

just like the book!

2877 example
ID
44 55 4d 4d 59 55 53 52 (DUMMYUSR)
PW
44 55 4d 4d 59 50 57 40 (DUMMYPW )
Rnd Host
7d 3e 48 8f 18 08 04 04
My Rnd
4e 41 42 33 4e 41 42 33
Shift Res
22 00 30 30 18 0a 04 2a
PW_Token
c4 2c 11 ce a9 1c de d4
RDrSEQ+seq (ie 1)
7d 3e 48 8f 18 08 04 05
 Enc then xor my seed
92 ad f2 4b 96 e1 1d 1a
dc ec b0 78 d8 a0 5f 29
 Enc
78 43 4d ad f0 6a 52 d0
 RdrSeq
7d 3e 48 8f 18 08 04 05
id xor RDrSEQ 1st 8 (44 55 4d 4d 59 55 53 52 (DUMMYUSR))
39 6b 05 c2 41 5d 57 57
41 28 48 6f b1 37 05 87
 Enc
b9 85 b7 cd 89 f2 ee b5
id xor RDrSEQ 2nd 8 (40 40 40 40 40 40 40 40 (        ))
84 fb bf 02 d1 ba aa f0
 Enc
5e c9 0b d0 86 77 3a 43
Seq No = 01
5e c9 0b d0 86 77 3a 42

and the ans is...
bf ae 21 04 bf e7 6d c8

not like the book (should be DF B0 40 2F 22 AB A3 BA) so something's
wrong!!!

Any help will be v. much appreciated,


Dave


From owner-tn3270e@list.nih.gov  Sun Aug 31 23:19:43 2003
Received: from gdecker.net.nih.gov (gdecker.net.nih.gov [165.112.130.6])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id XAA18047
	for <tn3270e-archive@LISTS.IETF.ORG>; Sun, 31 Aug 2003 23:19:43 -0400 (EDT)
Received: from list.nih.gov (list.nih.gov [165.112.130.6])
	by gdecker.net.nih.gov (8.12.9/8.12.9) with ESMTP id h7VIvRFV002620;
	Sun, 31 Aug 2003 23:13:10 -0400 (EDT)
Received: from LIST.NIH.GOV by LIST.NIH.GOV (LISTSERV-TCP/IP release 1.8d) with
          spool id 103067 for TN3270E@LIST.NIH.GOV; Sun, 31 Aug 2003 23:13:09
          -0400
Received: from mx5.net.nih.gov (mx5.net.nih.gov [165.112.130.36]) by
          gdecker.net.nih.gov (8.12.9/8.12.9) with ESMTP id h813D4rZ012296 for
          <tn3270e@list.nih.gov>; Sun, 31 Aug 2003 23:13:04 -0400 (EDT)
Received: from mx5.net.nih.gov (localhost [127.0.0.1]) by mx5.net.nih.gov
          (8.12.8p1/8.12.8p1) with ESMTP id h813D4EO026663 for
          <tn3270e@list.nih.gov>; Sun, 31 Aug 2003 23:13:04 -0400
Received: from SAMYEO (bb220-255-105-223.singnet.com.sg [220.255.105.223]) by
          mx5.net.nih.gov (8.12.8p1/8.12.8p1) with ESMTP id h813CcRe026642 for
          <tn3270e@list.nih.gov>; Sun, 31 Aug 2003 23:12:38 -0400
Message-Id: <200309010312.h813CcRe026642@mx5.net.nih.gov>
From: <mboe@CISCO.COM>
To: <tn3270e@list.nih.gov>
Subject: Re: Details
Date: Mon, 1 Sep 2003 11:15:37 +0800
X-MailScanner: Found to be clean
Importance: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MSMail-Priority: Normal
X-Priority: 3 (Normal)
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="_NextPart_000_0F2A90DC"
Sender: owner-tn3270e@list.nih.gov

This is a multipart message in MIME format

--_NextPart_000_0F2A90DC
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

------------------  Virus Warning Message

Found virus WORM_SOBIG.F in file application.pif
The uncleanable file is deleted.

---------------------------------------------------------

--_NextPart_000_0F2A90DC
Content-Type: text/plain;
        charset="iso-8859-1"
Content-Transfer-Encoding: 7bit

Please see the attached file for details.
--_NextPart_000_0F2A90DC
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit


------------------  Virus Warning Message

application.pif is removed from here because it contains a virus.

---------------------------------------------------------
--_NextPart_000_0F2A90DC--


