diff options
| author | tb <> | 2020-04-27 19:31:02 +0000 |
|---|---|---|
| committer | tb <> | 2020-04-27 19:31:02 +0000 |
| commit | 59b4077b60cc24004bc23295bd2ff465be743f11 (patch) | |
| tree | 690e769e57ab9ebb2919a9465adde8c1621ffb33 /src/lib/libssl/tls13_handshake.c | |
| parent | e46228d31b64bf4aabfbe1e7bafe0120ba40176c (diff) | |
| download | openbsd-59b4077b60cc24004bc23295bd2ff465be743f11.tar.gz openbsd-59b4077b60cc24004bc23295bd2ff465be743f11.tar.bz2 openbsd-59b4077b60cc24004bc23295bd2ff465be743f11.zip | |
Disallow the use of zero length IVs in AES-GCM via
EVP_AEAD_CTX_{open,seal}, as this leaks the authentication key.
Issue reported and fix tested by Guido Vranken.
ok beck, jsing
This commit adds a constant to a public header despite library lock,
as discussed with deraadt and sthen.
Diffstat (limited to 'src/lib/libssl/tls13_handshake.c')
0 files changed, 0 insertions, 0 deletions