[openssl/openssl] c426c2: Do not ignore empty associated data with AES-SIV mode

[Tomáš Mráz]

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: c426c281cfc23ab182f7d7d7a35229e7db1494d9
      https://github.com/openssl/openssl/commit/c426c281cfc23ab182f7d7d7a35229e7db1494d9
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2023-07-14 (Fri, 14 Jul 2023)

  Changed paths:
    M providers/implementations/ciphers/cipher_aes_siv.c

  Log Message:
  -----------
  Do not ignore empty associated data with AES-SIV mode

The AES-SIV mode allows for multiple associated data items
authenticated separately with any of these being 0 length.

The provided implementation ignores such empty associated data
which is incorrect in regards to the RFC 5297 and is also
a security issue because such empty associated data then become
unauthenticated if an application expects to authenticate them.

Fixes CVE-2023-2975

Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21384)


  Commit: 3993bb0c0c87e3ed0ab4274e4688aa814e164cfc
      https://github.com/openssl/openssl/commit/3993bb0c0c87e3ed0ab4274e4688aa814e164cfc
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2023-07-14 (Fri, 14 Jul 2023)

  Changed paths:
    M test/recipes/30-test_evp_data/evpciph_aes_siv.txt

  Log Message:
  -----------
  Add testcases for empty associated data entries with AES-SIV

Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21384)


  Commit: 1e398bec538978b9957e69bf9e12b3c626290bea
      https://github.com/openssl/openssl/commit/1e398bec538978b9957e69bf9e12b3c626290bea
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2023-07-14 (Fri, 14 Jul 2023)

  Changed paths:
    M CHANGES.md
    M NEWS.md

  Log Message:
  -----------
  Add CHANGES.md and NEWS.md entries for CVE-2023-2975

Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21384)


Compare: https://github.com/openssl/openssl/compare/ba189e0a4bde...1e398bec5389