- if (fast_memneq(output, encrypt_zero, 16)) {- /* Counter mode is buggy */- log_notice(LD_CRYPTO, "This OpenSSL has a buggy version of counter mode; "- "not using it.");- } else {- /* Counter mode is okay */- log_info(LD_CRYPTO, "This OpenSSL has a good implementation of counter "- "mode; using it.");- should_use_openssl_CTR = 1;- }
It might be cool to keep the check code, and instead of giving a log_notice() in the bug case, give a log_err() and exit.
Also, does anything still use aes_cnt_cipher.buf and aes_fill_buffer? If not, can we throw them out?