[openssl/openssl] 00e2f5: Do not ignore empty associated data with AES-SIV mode

[Tomáš Mráz]

  Branch: refs/heads/openssl-3.0
  Home:   https://github.com/openssl/openssl
  Commit: 00e2f5eea29994d19293ec4e8c8775ba73678598
      https://github.com/openssl/openssl/commit/00e2f5eea29994d19293ec4e8c8775ba73678598
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2023-07-14 (Fri, 14 Jul 2023)

  Changed paths:
    M providers/implementations/ciphers/cipher_aes_siv.c

  Log Message:
  -----------
  Do not ignore empty associated data with AES-SIV mode

The AES-SIV mode allows for multiple associated data items
authenticated separately with any of these being 0 length.

The provided implementation ignores such empty associated data
which is incorrect in regards to the RFC 5297 and is also
a security issue because such empty associated data then become
unauthenticated if an application expects to authenticate them.

Fixes CVE-2023-2975

Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21384)

(cherry picked from commit c426c281cfc23ab182f7d7d7a35229e7db1494d9)


  Commit: 96318a8d21bed334d78797eca5b32790775d5f05
      https://github.com/openssl/openssl/commit/96318a8d21bed334d78797eca5b32790775d5f05
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2023-07-14 (Fri, 14 Jul 2023)

  Changed paths:
    M test/recipes/30-test_evp_data/evpciph_aes_siv.txt

  Log Message:
  -----------
  Add testcases for empty associated data entries with AES-SIV

Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21384)

(cherry picked from commit 3993bb0c0c87e3ed0ab4274e4688aa814e164cfc)


  Commit: aff80b19e03486ef1b55cbc3af3488d5a67973f6
      https://github.com/openssl/openssl/commit/aff80b19e03486ef1b55cbc3af3488d5a67973f6
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2023-07-14 (Fri, 14 Jul 2023)

  Changed paths:
    M CHANGES.md
    M NEWS.md

  Log Message:
  -----------
  Add CHANGES.md and NEWS.md entries for CVE-2023-2975

Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21384)

(cherry picked from commit 1e398bec538978b9957e69bf9e12b3c626290bea)


Compare: https://github.com/openssl/openssl/compare/175fa8469fc7...aff80b19e034