In CFB mode, the iv is always encrypted.

diff --git a/crypto/aes/aes_cfb.c b/crypto/aes/aes_cfb.c
index 9b2917298a8f74cd950c69cd66442440d2ad40ca..41c2a5ec3df51dce1a082fd014cdaec8f6218133 100644 (file)
--- a/crypto/aes/aes_cfb.c
+++ b/crypto/aes/aes_cfb.c
@@ -137,7 +137,7 @@ void AES_cfb128_encrypt(const unsigned char *in, unsigned char *out,
        } else {
                while (l--) {
                        if (n == 0) {
-                               AES_decrypt(ivec, ivec, key);
+                               AES_encrypt(ivec, ivec, key);
                        }
                        c = *(in);
                        *(out++) = *(in++) ^ ivec[n];