[openssl/openssl] 129c41: Change HKDF to alloc the info buffer.

Shane noreply at github.com
Thu Dec 22 11:27:02 UTC 2022


  Branch: refs/heads/openssl-3.1
  Home:   https://github.com/openssl/openssl
  Commit: 129c41906b99db0524b1eb0caaffe35bb7ed9dec
      https://github.com/openssl/openssl/commit/129c41906b99db0524b1eb0caaffe35bb7ed9dec
  Author: slontis <shane.lontis at oracle.com>
  Date:   2022-12-22 (Thu, 22 Dec 2022)

  Changed paths:
    M providers/implementations/kdfs/hkdf.c
    M test/recipes/30-test_evp_data/evpkdf_hkdf.txt

  Log Message:
  -----------
  Change HKDF to alloc the info buffer.

Fixes #19909

I have enforced a maximum bound still but it is much higher.
Note also that TLS13 still uses the 2048 buffer size.

Reviewed-by: Hugo Landau <hlandau at openssl.org>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/19923)

(cherry picked from commit e8115bd1654d5cd7718109679b2047ca573083a8)




More information about the openssl-commits mailing list