Forum Discussion
Kevin_Stewart
Employee
Mar 13, 2008AES functions
Hello Devcentral gurus,
Does anyone know the specifics of the AES functions and how they work. Specifically, look at the following code snippet:
set testkey "test"
set testdata "blah"
log local0. "aes output -> [AES::encrypt $testkey $testdata]"
I've searched and searched through the forum and perhaps I just don't understand it. The above code delivers a different result every time a new browser window is opened. I have to assume that internally AES is pulling some additional information to "seed" the result, but then why the key? I would have thought that since the AES::key function delivers a random key, everything else would be static, and entering a static key would give the same result every time. What am I missing? Say for example I am strongly encrypting something that is being sent to the user in a file-based cookie. When they come back to the site later, I would like to be able to decrypt that data. Again, am I missing something? As it stands, the AES functions don't allow that.
Thank you for your help.
Kevin
24 Replies
- funkdaddy_31014
Nimbostratus
Also following up on this old thread. Like an earlier poster, we are are trying to encrypt in java and decrypt on the BigIP. I see the links to the C code from laz above, and wondering if anyone has gotten this work?
Anyone know of CWC-AES libraries written in Java?
Thanks! - IheartF5_45022
Nacreous
So...looky what is in the release notes for 11.1? Pity they don't tell us HOW to use the new functionality in an iRule. I need it!! I will ping our account team to get some doco released on this.
I would also like to know if encrypting on v11.1 and decrypting on another F5 on 11.0 is gonna cause any problems as I seem to have some issues.....Cryptographic Operations for iRulesIn this release, iRules support encryption and decryption of data that is compatible with external devices. iRules support includes the following ciphers:
- RC4
- DES
- 3DES
- AES
Additionally, iRules support includes the following encryption modes:
- ECB
- CBC
- CTR
- hoolio
Cirrostratus
Hi Joanna,
I'm checking internally to see what docs we have/can make available.
Aaron - hoolio
Cirrostratus
Hi Joanna,
The DC team update the CRYPTO wiki pages with details on the new functionality:
http://devcentral.f5.com/wiki/iRules.crypto.ashx
Aaron
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects