diff options
| author | Zhang Jinde <zjd5536@163.com> | 2020-09-24 14:48:28 +0800 |
|---|---|---|
| committer | Tomas Mraz <tomas@openssl.org> | 2021-02-19 12:27:53 +0100 |
| commit | 8df5cc3339d10f91ccb395650a83c031c2795742 (patch) | |
| tree | 773710f9489e653820fef9973fbc000a0d60ebd2 /crypto | |
| parent | a12c6442f24a32867c971b6feb5db61d01b02c1f (diff) | |
CRYPTO_gcm128_decrypt: fix mac or tag calculation
The incorrect code is in #ifdef branch that is normally
not compiled in.
Signed-off-by: Zhang Jinde <zjd5536@163.com>
Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/12968)
(cherry picked from commit 1d724b5e82ba36fb50fd24db3cd664da570daf84)
Diffstat (limited to 'crypto')
| -rw-r--r-- | crypto/modes/gcm128.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/crypto/modes/gcm128.c b/crypto/modes/gcm128.c index 0c0bf3cda5..4b29ead08c 100644 --- a/crypto/modes/gcm128.c +++ b/crypto/modes/gcm128.c @@ -1385,8 +1385,8 @@ int CRYPTO_gcm128_decrypt(GCM128_CONTEXT *ctx, else ctx->Yi.d[3] = ctr; for (i = 0; i < 16 / sizeof(size_t); ++i) { - size_t c = in[i]; - out[i] = c ^ ctx->EKi.t[i]; + size_t c = in_t[i]; + out_t[i] = c ^ ctx->EKi.t[i]; ctx->Xi.t[i] ^= c; } GCM_MUL(ctx); |