SALT_LEN
u_char salt[SALT_LEN];
arc4random_buf(salt, SALT_LEN);
salt, SALT_LEN, key, keylen + ivlen, rounds) < 0) {
if ((r = sshbuf_put_string(kdf, salt, SALT_LEN)) != 0 ||
if (mlen % 16 != SALT_LEN) {
C = (const u_char *)mangled + SALT_LEN; /* Then the ciphertext */
Clen = mlen - SALT_LEN;
MD5Update(&Context, A, SALT_LEN);
if (mlen % 16 != SALT_LEN) {
C = (const u_char *)mangled + SALT_LEN; /* Then the ciphertext */
Clen = mlen - SALT_LEN;
MD5Update(&Context, A, SALT_LEN);