DES CBC change looks dubious to me.

1 files changed, 7 insertions, 0 deletions

diff --git a/CHANGES b/CHANGES
index 92706e5850..f09222f1ca 100644
--- a/CHANGES
+++ b/CHANGES
@@ -10,8 +10,15 @@
      according to Mark Crispin <MRC@Panda.COM>.
      [Bodo Moeller]
 
+#if 0
   *) DES CBC did not update the IV. Weird.
      [Ben Laurie]
+#else
+     Look at des.c, cbc3_enc.c etc.: Those rely on that bevaviour of
+     des_cbc_encrypt and copy IVs themselves when they have to.
+     Either all those have to be changed too, or things must stay as they
+     are.
+#endif
 
   *) When bntest is run from "make test" it drives bc to check its
      calculations, as well as internally checking them. If an internal check