<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><div>Hello all, <br></div><div><br></div><div>In 'src/libstrongswan/crypto/prf_plus.c:get_bytes()' if 'this->counter' wraps, the feature is disabled.</div><div>The RFC says " The prf+ function is not defined beyond 255 times the size of the prf function output." however when wrapping occurs, we can set 'this->counter' to 0x01 since the behavior is not defined anyway.<br data-mce-bogus="1"></div><div>What do you think ?<br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div data-marker="__SIG_PRE__"><div>Jean-François Hren<br data-mce-bogus="1"></div><div id="mceResizeHandlen" class="mce-resizehandle" style="cursor: n-resize; margin: 0px; padding: 0px; left: 254.5px; top: 4.5px;"></div><div id="mceResizeHandlee" class="mce-resizehandle" style="cursor: e-resize; margin: 0px; padding: 0px; left: 504.5px; top: 71.5px;"></div><div id="mceResizeHandles" class="mce-resizehandle" style="cursor: s-resize; margin: 0px; padding: 0px; left: 254.5px; top: 138.5px;"></div><div id="mceResizeHandlew" class="mce-resizehandle" style="cursor: w-resize; margin: 0px; padding: 0px; left: 4.5px; top: 71.5px;"></div></div></div></body></html>