CONFOUNDERLENGTH
plaintext.length=krb5_roundup(input->length+CONFOUNDERLENGTH,blocksize);
ciphertext.length=krb5_roundup(input->length+CONFOUNDERLENGTH,blocksize);
confounder.length=CONFOUNDERLENGTH;
if (input->length < hashsize + CONFOUNDERLENGTH)
if (output->length < input->length - hashsize - CONFOUNDERLENGTH)
bcopy(plaintext.data+CONFOUNDERLENGTH, output->data,
(plaintext.length-CONFOUNDERLENGTH));
output->length=plaintext.length-CONFOUNDERLENGTH;