[openssl/openssl] 6941eb: When changing IV length invalidate previously set IV

[Tomáš Mráz]

  Branch: refs/heads/openssl-3.2
  Home:   https://github.com/openssl/openssl
  Commit: 6941eb4d86661488faa3b5c07fc80cfc84ed8934
      https://github.com/openssl/openssl/commit/6941eb4d86661488faa3b5c07fc80cfc84ed8934
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2023-11-03 (Fri, 03 Nov 2023)

  Changed paths:
    M providers/implementations/ciphers/cipher_aes_ocb.c
    M providers/implementations/ciphers/ciphercommon_ccm.c
    M providers/implementations/ciphers/ciphercommon_gcm.c

  Log Message:
  -----------
  When changing IV length invalidate previously set IV

Reviewed-by: Paul Dale <pauli at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22590)

(cherry picked from commit eddbb78f4e5196eee33b2fd3d6adeabb69d52eb7)


  Commit: e7cb2117c9ccc0d531d521e45ae780be669e4ffc
      https://github.com/openssl/openssl/commit/e7cb2117c9ccc0d531d521e45ae780be669e4ffc
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2023-11-03 (Fri, 03 Nov 2023)

  Changed paths:
    M providers/implementations/ciphers/cipher_des.c
    M providers/implementations/ciphers/cipher_tdes_common.c
    M providers/implementations/ciphers/ciphercommon.c
    M providers/implementations/include/prov/ciphercommon.h

  Log Message:
  -----------
  update/final: Return error if key is not set

Also make sure the key is not set if the key
length is changed on the context after the key was
set previously.

Reviewed-by: Paul Dale <pauli at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22590)

(cherry picked from commit 3a95d1e41abf2e8eb0f6f07003bac844950bfaae)


  Commit: de46fe6f3386f2a1c31fc124784825c97c9ca6e9
      https://github.com/openssl/openssl/commit/de46fe6f3386f2a1c31fc124784825c97c9ca6e9
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2023-11-03 (Fri, 03 Nov 2023)

  Changed paths:
    M test/evp_extra_test.c

  Log Message:
  -----------
  Add negative test for iv length change

Reviewed-by: Paul Dale <pauli at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22590)

(cherry picked from commit 82750a0826cd4728f40df9ef31b3294d83aaafe0)


  Commit: 57fc9992584a7b9bede4b5eb40a1074f7e7e0df4
      https://github.com/openssl/openssl/commit/57fc9992584a7b9bede4b5eb40a1074f7e7e0df4
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2023-11-03 (Fri, 03 Nov 2023)

  Changed paths:
    M test/evp_extra_test.c

  Log Message:
  -----------
  Add negative test for key length change

Reviewed-by: Paul Dale <pauli at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22590)

(cherry picked from commit 1aa08644ecd4005c0f55276b2e8dabd8a2a758f0)


Compare: https://github.com/openssl/openssl/compare/173dca8ea144...57fc9992584a