Kleines Weihnachtsgeschenk von der DEC

[TurboMagic]

We did some more work on this. Bear in mind that this is, while pushed to development branch, is not finished completely yet.
We still need to think about some of your stuff and unit tests need to be worked at as well, basing them most likely on your
data from this post.

=> stay tuned but don't hold your breath

[TurboMagic]

Ok, you can start breathing again
Well, I think the current version in the development branch "is it".
What we didn't take is the idea of being able to add further blocks at the end.
Christoph doesn't like to have such an unstandard extension.

Well, this of course has two sides, as nearly everything.
But: thanks for your valuable additions and the test data!

I couldn't add you to notices.txt, but only because you are already listed as
contributor

If I can find the necessary time for some cleanup in some other area of the library
this should get released as V6.5 along with the other things which got added since V6.4.x.

[Kas Ob.]

Big thank to you and to Christoph.

You are the maintainer and its your call.

As for non-standard extension, well you made a call and it is right, but i want to explain few things to any one here who want to encrypt data without leaking information (aka best practice and things might be missed), namely the data length,
To do that i want to give an example, lets say this forum do encrypt users name in DB using BlowFish, so a name like our respected Uwe will be 6 bytes in Unicode, encrypting the name without padding (using lets say CTR mode) will be 6 bytes, while when padded will be 8 byte (on all modes), while any name with 4 chars will be 8 bytes and padded will be 16 bytes, so short names will stand out in a table, other names like Wolfeschlegelsteinhausenbergerdorff (36 bytes) will be unique too at 80 padded byte, but if we padded every name to 80 byte, meaning all names up to 39 chars will be the same, and this will prevent any information leak, or at least will decrease the chance to perform any useful information analysis to isolate and differentiate users and their other stored data.

Also when you pushed the separation for padding into its own unit, i had to say my opinion and wrote that code out of now or never, as it is pushed to development, and of course if padding in your current target is for only cipher and what had been standardized, then it is not wrong at all and you call is the right one, as there is no wrong call here, but if you want to leave it with some flexibility to be used with not only block cipher then, lets say this in other words .. some one had to read my very this post to understand how to obfuscate and protect a batch encryption, and even after that he will need to perform/implement the padding (a padding) code on his own !, and that is it.

Thank you again.