[SSHD-949] Session should use cipher block size and not IV size to calculate padding

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.0, 2.1.0, 2.2.0, 2.3.0
• Fix Version/s: 2.4.0
• Flags: Important
• Assignee: Lyor Goldstein
• Reporter: Lyor Goldstein
• Created: 17/Oct/19 06:42
• Updated: 08/Jun/20 13:35
• Resolved: 20/Oct/19 15:31

Description

AbstractSession.java

// values are subsequently used to calculated padding boundary
inCipherSize = inCipher.getIVSize();
outCipherSize = outCipher.getIVSize();

By chance, since usually the selected cipher is AES we get 16 which is both the initial vector (IV) and cipher block size.