summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authortb <>2020-03-16 15:25:14 +0000
committertb <>2020-03-16 15:25:14 +0000
commitafbeb5d666df4224373ad3c47cef95d0c68ed8d5 (patch)
tree618a5907f280250b761792adbc8ceb103d1a5999
parentdc99a0fd50f2ded1793b4651a9931696db2b6614 (diff)
downloadopenbsd-afbeb5d666df4224373ad3c47cef95d0c68ed8d5.tar.gz
openbsd-afbeb5d666df4224373ad3c47cef95d0c68ed8d5.tar.bz2
openbsd-afbeb5d666df4224373ad3c47cef95d0c68ed8d5.zip
Consistently spell 'unsigned' as 'unsigned int', as style(9) seems
to prefer that. No binary change except in d1_srtp.c where the generated assembly differs only in line numbers (due to a wrapped long line) and in s3_cbc.c where there is no change in the generated assembly. ok inoguchi jsing
-rw-r--r--src/lib/libssl/d1_srtp.c7
-rw-r--r--src/lib/libssl/s3_cbc.c50
-rw-r--r--src/lib/libssl/ssl.h6
-rw-r--r--src/lib/libssl/ssl_lib.c6
-rw-r--r--src/lib/libssl/ssl_locl.h12
-rw-r--r--src/lib/libssl/ssl_pkt.c4
-rw-r--r--src/lib/libssl/t1_enc.c4
7 files changed, 45 insertions, 44 deletions
diff --git a/src/lib/libssl/d1_srtp.c b/src/lib/libssl/d1_srtp.c
index 4b1b24a3c1..70e9a4f127 100644
--- a/src/lib/libssl/d1_srtp.c
+++ b/src/lib/libssl/d1_srtp.c
@@ -1,4 +1,4 @@
1/* $OpenBSD: d1_srtp.c,v 1.23 2018/11/09 04:35:09 tb Exp $ */ 1/* $OpenBSD: d1_srtp.c,v 1.24 2020/03/16 15:25:13 tb Exp $ */
2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) 2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3 * All rights reserved. 3 * All rights reserved.
4 * 4 *
@@ -140,7 +140,7 @@ static SRTP_PROTECTION_PROFILE srtp_known_profiles[] = {
140 140
141int 141int
142srtp_find_profile_by_name(char *profile_name, SRTP_PROTECTION_PROFILE **pptr, 142srtp_find_profile_by_name(char *profile_name, SRTP_PROTECTION_PROFILE **pptr,
143 unsigned len) 143 unsigned int len)
144{ 144{
145 SRTP_PROTECTION_PROFILE *p; 145 SRTP_PROTECTION_PROFILE *p;
146 146
@@ -159,7 +159,8 @@ srtp_find_profile_by_name(char *profile_name, SRTP_PROTECTION_PROFILE **pptr,
159} 159}
160 160
161int 161int
162srtp_find_profile_by_num(unsigned profile_num, SRTP_PROTECTION_PROFILE **pptr) 162srtp_find_profile_by_num(unsigned int profile_num,
163 SRTP_PROTECTION_PROFILE **pptr)
163{ 164{
164 SRTP_PROTECTION_PROFILE *p; 165 SRTP_PROTECTION_PROFILE *p;
165 166
diff --git a/src/lib/libssl/s3_cbc.c b/src/lib/libssl/s3_cbc.c
index 8ae87d7303..004b92118e 100644
--- a/src/lib/libssl/s3_cbc.c
+++ b/src/lib/libssl/s3_cbc.c
@@ -1,4 +1,4 @@
1/* $OpenBSD: s3_cbc.c,v 1.20 2020/03/12 17:09:02 jsing Exp $ */ 1/* $OpenBSD: s3_cbc.c,v 1.21 2020/03/16 15:25:13 tb Exp $ */
2/* ==================================================================== 2/* ====================================================================
3 * Copyright (c) 2012 The OpenSSL Project. All rights reserved. 3 * Copyright (c) 2012 The OpenSSL Project. All rights reserved.
4 * 4 *
@@ -73,20 +73,20 @@
73 * bits. They use the fact that arithmetic shift shifts-in the sign bit. 73 * bits. They use the fact that arithmetic shift shifts-in the sign bit.
74 * However, this is not ensured by the C standard so you may need to replace 74 * However, this is not ensured by the C standard so you may need to replace
75 * them with something else on odd CPUs. */ 75 * them with something else on odd CPUs. */
76#define DUPLICATE_MSB_TO_ALL(x) ((unsigned)((int)(x) >> (sizeof(int) * 8 - 1))) 76#define DUPLICATE_MSB_TO_ALL(x) ((unsigned int)((int)(x) >> (sizeof(int) * 8 - 1)))
77#define DUPLICATE_MSB_TO_ALL_8(x) ((unsigned char)(DUPLICATE_MSB_TO_ALL(x))) 77#define DUPLICATE_MSB_TO_ALL_8(x) ((unsigned char)(DUPLICATE_MSB_TO_ALL(x)))
78 78
79/* constant_time_lt returns 0xff if a<b and 0x00 otherwise. */ 79/* constant_time_lt returns 0xff if a<b and 0x00 otherwise. */
80static unsigned 80static unsigned int
81constant_time_lt(unsigned a, unsigned b) 81constant_time_lt(unsigned int a, unsigned int b)
82{ 82{
83 a -= b; 83 a -= b;
84 return DUPLICATE_MSB_TO_ALL(a); 84 return DUPLICATE_MSB_TO_ALL(a);
85} 85}
86 86
87/* constant_time_ge returns 0xff if a>=b and 0x00 otherwise. */ 87/* constant_time_ge returns 0xff if a>=b and 0x00 otherwise. */
88static unsigned 88static unsigned int
89constant_time_ge(unsigned a, unsigned b) 89constant_time_ge(unsigned int a, unsigned int b)
90{ 90{
91 a -= b; 91 a -= b;
92 return DUPLICATE_MSB_TO_ALL(~a); 92 return DUPLICATE_MSB_TO_ALL(~a);
@@ -94,9 +94,9 @@ constant_time_ge(unsigned a, unsigned b)
94 94
95/* constant_time_eq_8 returns 0xff if a==b and 0x00 otherwise. */ 95/* constant_time_eq_8 returns 0xff if a==b and 0x00 otherwise. */
96static unsigned char 96static unsigned char
97constant_time_eq_8(unsigned a, unsigned b) 97constant_time_eq_8(unsigned int a, unsigned int b)
98{ 98{
99 unsigned c = a ^ b; 99 unsigned int c = a ^ b;
100 c--; 100 c--;
101 return DUPLICATE_MSB_TO_ALL_8(c); 101 return DUPLICATE_MSB_TO_ALL_8(c);
102} 102}
@@ -114,10 +114,10 @@ constant_time_eq_8(unsigned a, unsigned b)
114 * -1: otherwise. */ 114 * -1: otherwise. */
115int 115int
116tls1_cbc_remove_padding(const SSL* s, SSL3_RECORD_INTERNAL *rec, 116tls1_cbc_remove_padding(const SSL* s, SSL3_RECORD_INTERNAL *rec,
117 unsigned block_size, unsigned mac_size) 117 unsigned int block_size, unsigned int mac_size)
118{ 118{
119 unsigned padding_length, good, to_check, i; 119 unsigned int padding_length, good, to_check, i;
120 const unsigned overhead = 1 /* padding length byte */ + mac_size; 120 const unsigned int overhead = 1 /* padding length byte */ + mac_size;
121 121
122 /* Check if version requires explicit IV */ 122 /* Check if version requires explicit IV */
123 if (SSL_USE_EXPLICIT_IV(s)) { 123 if (SSL_USE_EXPLICIT_IV(s)) {
@@ -195,7 +195,7 @@ tls1_cbc_remove_padding(const SSL* s, SSL3_RECORD_INTERNAL *rec,
195 195
196void 196void
197ssl3_cbc_copy_mac(unsigned char* out, const SSL3_RECORD_INTERNAL *rec, 197ssl3_cbc_copy_mac(unsigned char* out, const SSL3_RECORD_INTERNAL *rec,
198 unsigned md_size, unsigned orig_len) 198 unsigned int md_size, unsigned int orig_len)
199{ 199{
200#if defined(CBC_MAC_ROTATE_IN_PLACE) 200#if defined(CBC_MAC_ROTATE_IN_PLACE)
201 unsigned char rotated_mac_buf[64 + EVP_MAX_MD_SIZE]; 201 unsigned char rotated_mac_buf[64 + EVP_MAX_MD_SIZE];
@@ -205,14 +205,14 @@ ssl3_cbc_copy_mac(unsigned char* out, const SSL3_RECORD_INTERNAL *rec,
205#endif 205#endif
206 206
207 /* mac_end is the index of |rec->data| just after the end of the MAC. */ 207 /* mac_end is the index of |rec->data| just after the end of the MAC. */
208 unsigned mac_end = rec->length; 208 unsigned int mac_end = rec->length;
209 unsigned mac_start = mac_end - md_size; 209 unsigned int mac_start = mac_end - md_size;
210 /* scan_start contains the number of bytes that we can ignore because 210 /* scan_start contains the number of bytes that we can ignore because
211 * the MAC's position can only vary by 255 bytes. */ 211 * the MAC's position can only vary by 255 bytes. */
212 unsigned scan_start = 0; 212 unsigned int scan_start = 0;
213 unsigned i, j; 213 unsigned int i, j;
214 unsigned div_spoiler; 214 unsigned int div_spoiler;
215 unsigned rotate_offset; 215 unsigned int rotate_offset;
216 216
217 OPENSSL_assert(orig_len >= md_size); 217 OPENSSL_assert(orig_len >= md_size);
218 OPENSSL_assert(md_size <= EVP_MAX_MD_SIZE); 218 OPENSSL_assert(md_size <= EVP_MAX_MD_SIZE);
@@ -316,7 +316,7 @@ static void
316tls1_sha256_final_raw(void* ctx, unsigned char *md_out) 316tls1_sha256_final_raw(void* ctx, unsigned char *md_out)
317{ 317{
318 SHA256_CTX *sha256 = ctx; 318 SHA256_CTX *sha256 = ctx;
319 unsigned i; 319 unsigned int i;
320 320
321 for (i = 0; i < 8; i++) { 321 for (i = 0; i < 8; i++) {
322 l2n(sha256->h[i], md_out); 322 l2n(sha256->h[i], md_out);
@@ -327,7 +327,7 @@ static void
327tls1_sha512_final_raw(void* ctx, unsigned char *md_out) 327tls1_sha512_final_raw(void* ctx, unsigned char *md_out)
328{ 328{
329 SHA512_CTX *sha512 = ctx; 329 SHA512_CTX *sha512 = ctx;
330 unsigned i; 330 unsigned int i;
331 331
332 for (i = 0; i < 8; i++) { 332 for (i = 0; i < 8; i++) {
333 l2n8(sha512->h[i], md_out); 333 l2n8(sha512->h[i], md_out);
@@ -382,7 +382,7 @@ ssl3_cbc_digest_record(const EVP_MD_CTX *ctx, unsigned char* md_out,
382 size_t* md_out_size, const unsigned char header[13], 382 size_t* md_out_size, const unsigned char header[13],
383 const unsigned char *data, size_t data_plus_mac_size, 383 const unsigned char *data, size_t data_plus_mac_size,
384 size_t data_plus_mac_plus_padding_size, const unsigned char *mac_secret, 384 size_t data_plus_mac_plus_padding_size, const unsigned char *mac_secret,
385 unsigned mac_secret_length) 385 unsigned int mac_secret_length)
386{ 386{
387 union { 387 union {
388 /* 388 /*
@@ -395,8 +395,8 @@ ssl3_cbc_digest_record(const EVP_MD_CTX *ctx, unsigned char* md_out,
395 } md_state; 395 } md_state;
396 void (*md_final_raw)(void *ctx, unsigned char *md_out); 396 void (*md_final_raw)(void *ctx, unsigned char *md_out);
397 void (*md_transform)(void *ctx, const unsigned char *block); 397 void (*md_transform)(void *ctx, const unsigned char *block);
398 unsigned md_size, md_block_size = 64; 398 unsigned int md_size, md_block_size = 64;
399 unsigned header_length, variance_blocks, 399 unsigned int header_length, variance_blocks,
400 len, max_mac_bytes, num_blocks, 400 len, max_mac_bytes, num_blocks,
401 num_starting_blocks, k, mac_end_offset, c, index_a, index_b; 401 num_starting_blocks, k, mac_end_offset, c, index_a, index_b;
402 unsigned int bits; /* at most 18 bits */ 402 unsigned int bits; /* at most 18 bits */
@@ -405,11 +405,11 @@ ssl3_cbc_digest_record(const EVP_MD_CTX *ctx, unsigned char* md_out,
405 unsigned char hmac_pad[MAX_HASH_BLOCK_SIZE]; 405 unsigned char hmac_pad[MAX_HASH_BLOCK_SIZE];
406 unsigned char first_block[MAX_HASH_BLOCK_SIZE]; 406 unsigned char first_block[MAX_HASH_BLOCK_SIZE];
407 unsigned char mac_out[EVP_MAX_MD_SIZE]; 407 unsigned char mac_out[EVP_MAX_MD_SIZE];
408 unsigned i, j, md_out_size_u; 408 unsigned int i, j, md_out_size_u;
409 EVP_MD_CTX md_ctx; 409 EVP_MD_CTX md_ctx;
410 /* mdLengthSize is the number of bytes in the length field that terminates 410 /* mdLengthSize is the number of bytes in the length field that terminates
411 * the hash. */ 411 * the hash. */
412 unsigned md_length_size = 8; 412 unsigned int md_length_size = 8;
413 char length_is_big_endian = 1; 413 char length_is_big_endian = 1;
414 414
415 /* This is a, hopefully redundant, check that allows us to forget about 415 /* This is a, hopefully redundant, check that allows us to forget about
diff --git a/src/lib/libssl/ssl.h b/src/lib/libssl/ssl.h
index 39aa25356c..4370c84cd7 100644
--- a/src/lib/libssl/ssl.h
+++ b/src/lib/libssl/ssl.h
@@ -1,4 +1,4 @@
1/* $OpenBSD: ssl.h,v 1.170 2020/01/22 07:49:33 beck Exp $ */ 1/* $OpenBSD: ssl.h,v 1.171 2020/03/16 15:25:13 tb Exp $ */
2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) 2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3 * All rights reserved. 3 * All rights reserved.
4 * 4 *
@@ -403,7 +403,7 @@ struct ssl_method_internal_st;
403struct ssl_method_st { 403struct ssl_method_st {
404 int (*ssl_dispatch_alert)(SSL *s); 404 int (*ssl_dispatch_alert)(SSL *s);
405 int (*num_ciphers)(void); 405 int (*num_ciphers)(void);
406 const SSL_CIPHER *(*get_cipher)(unsigned ncipher); 406 const SSL_CIPHER *(*get_cipher)(unsigned int ncipher);
407 const SSL_CIPHER *(*get_cipher_by_char)(const unsigned char *ptr); 407 const SSL_CIPHER *(*get_cipher_by_char)(const unsigned char *ptr);
408 int (*put_cipher_by_char)(const SSL_CIPHER *cipher, unsigned char *ptr); 408 int (*put_cipher_by_char)(const SSL_CIPHER *cipher, unsigned char *ptr);
409 409
@@ -766,7 +766,7 @@ int SSL_select_next_proto(unsigned char **out, unsigned char *outlen,
766 const unsigned char *in, unsigned int inlen, const unsigned char *client, 766 const unsigned char *in, unsigned int inlen, const unsigned char *client,
767 unsigned int client_len); 767 unsigned int client_len);
768void SSL_get0_next_proto_negotiated(const SSL *s, const unsigned char **data, 768void SSL_get0_next_proto_negotiated(const SSL *s, const unsigned char **data,
769 unsigned *len); 769 unsigned int *len);
770 770
771#define OPENSSL_NPN_UNSUPPORTED 0 771#define OPENSSL_NPN_UNSUPPORTED 0
772#define OPENSSL_NPN_NEGOTIATED 1 772#define OPENSSL_NPN_NEGOTIATED 1
diff --git a/src/lib/libssl/ssl_lib.c b/src/lib/libssl/ssl_lib.c
index a5a79d76bc..0c9b90be85 100644
--- a/src/lib/libssl/ssl_lib.c
+++ b/src/lib/libssl/ssl_lib.c
@@ -1,4 +1,4 @@
1/* $OpenBSD: ssl_lib.c,v 1.211 2020/01/26 07:24:47 jsing Exp $ */ 1/* $OpenBSD: ssl_lib.c,v 1.212 2020/03/16 15:25:14 tb Exp $ */
2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) 2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3 * All rights reserved. 3 * All rights reserved.
4 * 4 *
@@ -1530,7 +1530,7 @@ found:
1530/* SSL_get0_next_proto_negotiated is deprecated. */ 1530/* SSL_get0_next_proto_negotiated is deprecated. */
1531void 1531void
1532SSL_get0_next_proto_negotiated(const SSL *s, const unsigned char **data, 1532SSL_get0_next_proto_negotiated(const SSL *s, const unsigned char **data,
1533 unsigned *len) 1533 unsigned int *len)
1534{ 1534{
1535 *data = NULL; 1535 *data = NULL;
1536 *len = 0; 1536 *len = 0;
@@ -1637,7 +1637,7 @@ SSL_CTX_set_alpn_select_cb(SSL_CTX* ctx,
1637 */ 1637 */
1638void 1638void
1639SSL_get0_alpn_selected(const SSL *ssl, const unsigned char **data, 1639SSL_get0_alpn_selected(const SSL *ssl, const unsigned char **data,
1640 unsigned *len) 1640 unsigned int *len)
1641{ 1641{
1642 *data = NULL; 1642 *data = NULL;
1643 *len = 0; 1643 *len = 0;
diff --git a/src/lib/libssl/ssl_locl.h b/src/lib/libssl/ssl_locl.h
index f7b3868cd6..07240e31a2 100644
--- a/src/lib/libssl/ssl_locl.h
+++ b/src/lib/libssl/ssl_locl.h
@@ -1,4 +1,4 @@
1/* $OpenBSD: ssl_locl.h,v 1.270 2020/03/13 16:40:42 jsing Exp $ */ 1/* $OpenBSD: ssl_locl.h,v 1.271 2020/03/16 15:25:14 tb Exp $ */
2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) 2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3 * All rights reserved. 3 * All rights reserved.
4 * 4 *
@@ -1372,15 +1372,15 @@ int tls1_check_ec_server_key(SSL *s);
1372 1372
1373/* s3_cbc.c */ 1373/* s3_cbc.c */
1374void ssl3_cbc_copy_mac(unsigned char *out, const SSL3_RECORD_INTERNAL *rec, 1374void ssl3_cbc_copy_mac(unsigned char *out, const SSL3_RECORD_INTERNAL *rec,
1375 unsigned md_size, unsigned orig_len); 1375 unsigned int md_size, unsigned int orig_len);
1376int tls1_cbc_remove_padding(const SSL *s, SSL3_RECORD_INTERNAL *rec, 1376int tls1_cbc_remove_padding(const SSL *s, SSL3_RECORD_INTERNAL *rec,
1377 unsigned block_size, unsigned mac_size); 1377 unsigned int block_size, unsigned int mac_size);
1378char ssl3_cbc_record_digest_supported(const EVP_MD_CTX *ctx); 1378char ssl3_cbc_record_digest_supported(const EVP_MD_CTX *ctx);
1379int ssl3_cbc_digest_record(const EVP_MD_CTX *ctx, unsigned char *md_out, 1379int ssl3_cbc_digest_record(const EVP_MD_CTX *ctx, unsigned char *md_out,
1380 size_t *md_out_size, const unsigned char header[13], 1380 size_t *md_out_size, const unsigned char header[13],
1381 const unsigned char *data, size_t data_plus_mac_size, 1381 const unsigned char *data, size_t data_plus_mac_size,
1382 size_t data_plus_mac_plus_padding_size, const unsigned char *mac_secret, 1382 size_t data_plus_mac_plus_padding_size, const unsigned char *mac_secret,
1383 unsigned mac_secret_length); 1383 unsigned int mac_secret_length);
1384int SSL_state_func_code(int _state); 1384int SSL_state_func_code(int _state);
1385 1385
1386#define SSLerror(s, r) SSL_error_internal(s, r, __FILE__, __LINE__) 1386#define SSLerror(s, r) SSL_error_internal(s, r, __FILE__, __LINE__)
@@ -1390,8 +1390,8 @@ void SSL_error_internal(const SSL *s, int r, char *f, int l);
1390#ifndef OPENSSL_NO_SRTP 1390#ifndef OPENSSL_NO_SRTP
1391 1391
1392int srtp_find_profile_by_name(char *profile_name, 1392int srtp_find_profile_by_name(char *profile_name,
1393 SRTP_PROTECTION_PROFILE **pptr, unsigned len); 1393 SRTP_PROTECTION_PROFILE **pptr, unsigned int len);
1394int srtp_find_profile_by_num(unsigned profile_num, 1394int srtp_find_profile_by_num(unsigned int profile_num,
1395 SRTP_PROTECTION_PROFILE **pptr); 1395 SRTP_PROTECTION_PROFILE **pptr);
1396 1396
1397#endif /* OPENSSL_NO_SRTP */ 1397#endif /* OPENSSL_NO_SRTP */
diff --git a/src/lib/libssl/ssl_pkt.c b/src/lib/libssl/ssl_pkt.c
index 0d1d4f78c7..157dd9895b 100644
--- a/src/lib/libssl/ssl_pkt.c
+++ b/src/lib/libssl/ssl_pkt.c
@@ -1,4 +1,4 @@
1/* $OpenBSD: ssl_pkt.c,v 1.23 2020/03/12 17:09:02 jsing Exp $ */ 1/* $OpenBSD: ssl_pkt.c,v 1.24 2020/03/16 15:25:14 tb Exp $ */
2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) 2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3 * All rights reserved. 3 * All rights reserved.
4 * 4 *
@@ -332,7 +332,7 @@ ssl3_get_record(SSL *s)
332 SSL3_RECORD_INTERNAL *rr; 332 SSL3_RECORD_INTERNAL *rr;
333 SSL_SESSION *sess; 333 SSL_SESSION *sess;
334 unsigned char md[EVP_MAX_MD_SIZE]; 334 unsigned char md[EVP_MAX_MD_SIZE];
335 unsigned mac_size, orig_len; 335 unsigned int mac_size, orig_len;
336 336
337 rr = &(S3I(s)->rrec); 337 rr = &(S3I(s)->rrec);
338 sess = s->session; 338 sess = s->session;
diff --git a/src/lib/libssl/t1_enc.c b/src/lib/libssl/t1_enc.c
index 177ee061ed..2893e1d4dc 100644
--- a/src/lib/libssl/t1_enc.c
+++ b/src/lib/libssl/t1_enc.c
@@ -1,4 +1,4 @@
1/* $OpenBSD: t1_enc.c,v 1.121 2020/03/13 16:40:42 jsing Exp $ */ 1/* $OpenBSD: t1_enc.c,v 1.122 2020/03/16 15:25:14 tb Exp $ */
2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) 2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3 * All rights reserved. 3 * All rights reserved.
4 * 4 *
@@ -336,7 +336,7 @@ tls1_aead_ctx_init(SSL_AEAD_CTX **aead_ctx)
336 336
337static int 337static int
338tls1_change_cipher_state_aead(SSL *s, char is_read, const unsigned char *key, 338tls1_change_cipher_state_aead(SSL *s, char is_read, const unsigned char *key,
339 unsigned key_len, const unsigned char *iv, unsigned iv_len) 339 unsigned int key_len, const unsigned char *iv, unsigned int iv_len)
340{ 340{
341 const EVP_AEAD *aead = S3I(s)->tmp.new_aead; 341 const EVP_AEAD *aead = S3I(s)->tmp.new_aead;
342 SSL_AEAD_CTX *aead_ctx; 342 SSL_AEAD_CTX *aead_ctx;