diff options
author | Shane Lontis <shane.lontis@oracle.com> | 2020-09-15 11:08:27 +1000 |
---|---|---|
committer | Shane Lontis <shane.lontis@oracle.com> | 2020-09-17 12:55:39 +1000 |
commit | 8230710f04ed70fee41ec3ed8f3e4b1af55be05a (patch) | |
tree | 4d5e61c9cb5093b6593f0392bde9f281a61170dd /providers/implementations/ciphers | |
parent | eb750219f2ab7886f174a071f880b31cedeeb0a8 (diff) |
Update AES GCM IV max length to be 1024 bits (was 512)
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/12875)
Diffstat (limited to 'providers/implementations/ciphers')
-rw-r--r-- | providers/implementations/ciphers/cipher_aes_gcm.c | 6 | ||||
-rw-r--r-- | providers/implementations/ciphers/cipher_aria_gcm.c | 5 |
2 files changed, 9 insertions, 2 deletions
diff --git a/providers/implementations/ciphers/cipher_aes_gcm.c b/providers/implementations/ciphers/cipher_aes_gcm.c index 2f22c32067..409dfa7b33 100644 --- a/providers/implementations/ciphers/cipher_aes_gcm.c +++ b/providers/implementations/ciphers/cipher_aes_gcm.c @@ -20,6 +20,9 @@ #include "prov/implementations.h" #include "prov/providercommon.h" +#define AES_GCM_IV_MIN_SIZE (64 / 8) /* size in bytes */ +/* Note: GCM_IV_MAX_SIZE is listed in ciphercommon_gcm.h */ + static void *aes_gcm_newctx(void *provctx, size_t keybits) { PROV_AES_GCM_CTX *ctx; @@ -29,7 +32,8 @@ static void *aes_gcm_newctx(void *provctx, size_t keybits) ctx = OPENSSL_zalloc(sizeof(*ctx)); if (ctx != NULL) - gcm_initctx(provctx, &ctx->base, keybits, PROV_AES_HW_gcm(keybits), 8); + gcm_initctx(provctx, &ctx->base, keybits, PROV_AES_HW_gcm(keybits), + AES_GCM_IV_MIN_SIZE); return ctx; } diff --git a/providers/implementations/ciphers/cipher_aria_gcm.c b/providers/implementations/ciphers/cipher_aria_gcm.c index de228a0755..a54afae1bb 100644 --- a/providers/implementations/ciphers/cipher_aria_gcm.c +++ b/providers/implementations/ciphers/cipher_aria_gcm.c @@ -13,6 +13,8 @@ #include "prov/implementations.h" #include "prov/providercommon.h" +#define ARIA_GCM_IV_MIN_SIZE (32 / 8) /* size in bytes */ + static void *aria_gcm_newctx(void *provctx, size_t keybits) { PROV_ARIA_GCM_CTX *ctx; @@ -22,7 +24,8 @@ static void *aria_gcm_newctx(void *provctx, size_t keybits) ctx = OPENSSL_zalloc(sizeof(*ctx)); if (ctx != NULL) - gcm_initctx(provctx, &ctx->base, keybits, PROV_ARIA_HW_gcm(keybits), 4); + gcm_initctx(provctx, &ctx->base, keybits, PROV_ARIA_HW_gcm(keybits), + ARIA_GCM_IV_MIN_SIZE); return ctx; } |