The first enctype RFC3961 prf output length's bytes are correct because the little- and big-endian representations of unsigned zero are the same. The second block of output was wrong because the counter was not being encoded as big-endian. This change could break applications. But those applications would not have been interoperating with other implementations anyways (in particular: MIT's).
		
			
				
	
	
	
		
			4.4 KiB
		
	
	
	
	
	
	
	
			
		
		
	
	
			4.4 KiB