From: Martin Willi <martin@strongswan.org>
Date: Thu, 11 Jun 2009 09:05:00 +0000 (+0200)
Subject: gcrypt blowfish supports 128 bit key size only
X-Git-Tag: 4.3.2~95
X-Git-Url: https://git.strongswan.org/?p=strongswan.git;a=commitdiff_plain;h=e51f60722178d04fcbd9dc2a104ac4a7fb2e08de;ds=sidebyside

gcrypt blowfish supports 128 bit key size only
---

diff --git a/src/libstrongswan/plugins/gcrypt/gcrypt_crypter.c b/src/libstrongswan/plugins/gcrypt/gcrypt_crypter.c
index 4d68f1b..3bf513f 100644
--- a/src/libstrongswan/plugins/gcrypt/gcrypt_crypter.c
+++ b/src/libstrongswan/plugins/gcrypt/gcrypt_crypter.c
@@ -149,6 +149,10 @@ gcrypt_crypter_t *gcrypt_crypter_create(encryption_algorithm_t algo,
 			gcrypt_alg = GCRY_CIPHER_CAST5;
 			break;
 		case ENCR_BLOWFISH:
+			if (key_size != 16)
+			{	/* gcrypt currently supports 128 bit blowfish only */
+				return NULL;
+			}
 			gcrypt_alg = GCRY_CIPHER_BLOWFISH;
 			break;
 		/* case ENCR_AES_CTR: