Do not overwrite IVs slice memory

[gogost.git] / src / cypherpunks.ru / gogost / gost28147 / cfb.go

diff --git a/src/cypherpunks.ru/gogost/gost28147/cfb.go b/src/cypherpunks.ru/gogost/gost28147/cfb.go
index c94bdbbfc2d566ddc93bf552b42f56d2eefa68e8..902d12dc85713332b9fbb90a656b976c88cd8658 100644 (file)
--- a/src/cypherpunks.ru/gogost/gost28147/cfb.go
+++ b/src/cypherpunks.ru/gogost/gost28147/cfb.go
@@ -21,8 +21,13 @@ type CFBEncrypter struct {
        iv []byte
 }
 
-func (c *Cipher) NewCFBEncrypter(iv [BlockSize]byte) *CFBEncrypter {
-       return &CFBEncrypter{c, iv[:]}
+func (c *Cipher) NewCFBEncrypter(iv []byte) *CFBEncrypter {
+       if len(iv) != BlockSize {
+               panic("iv length is not equal to blocksize")
+       }
+       encrypter := CFBEncrypter{c: c, iv: make([]byte, BlockSize)}
+       copy(encrypter.iv, iv)
+       return &encrypter
 }
 
 func (c *CFBEncrypter) XORKeyStream(dst, src []byte) {
@@ -48,8 +53,13 @@ type CFBDecrypter struct {
        iv []byte
 }
 
-func (c *Cipher) NewCFBDecrypter(iv [BlockSize]byte) *CFBDecrypter {
-       return &CFBDecrypter{c, iv[:]}
+func (c *Cipher) NewCFBDecrypter(iv []byte) *CFBDecrypter {
+       if len(iv) != BlockSize {
+               panic("iv length is not equal to blocksize")
+       }
+       decrypter := CFBDecrypter{c: c, iv: make([]byte, BlockSize)}
+       copy(decrypter.iv, iv)
+       return &decrypter
 }
 
 func (c *CFBDecrypter) XORKeyStream(dst, src []byte) {