[openssl/openssl] 39d857: make inability to dup/clone ciphers an error
Neil Horman
noreply at github.com
Tue Sep 12 14:02:20 UTC 2023
Branch: refs/heads/master
Home: https://github.com/openssl/openssl
Commit: 39d857bb610d25b3de4e414264246ec41753c446
https://github.com/openssl/openssl/commit/39d857bb610d25b3de4e414264246ec41753c446
Author: Neil Horman <nhorman at openssl.org>
Date: 2023-09-12 (Tue, 12 Sep 2023)
Changed paths:
M test/evp_test.c
Log Message:
-----------
make inability to dup/clone ciphers an error
There should be no reason that a cipher can't be duplicated
Fixes #21887
Reviewed-by: Paul Dale <pauli at openssl.org>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21933)
Commit: 0239fb3db77e9de2031c5054854cba8e417c1b72
https://github.com/openssl/openssl/commit/0239fb3db77e9de2031c5054854cba8e417c1b72
Author: Neil Horman <nhorman at openssl.org>
Date: 2023-09-12 (Tue, 12 Sep 2023)
Changed paths:
M providers/implementations/ciphers/cipher_aes_ccm.c
M providers/implementations/ciphers/cipher_aes_gcm.c
M providers/implementations/ciphers/cipher_aria_ccm.c
M providers/implementations/ciphers/cipher_aria_gcm.c
M providers/implementations/ciphers/cipher_sm4_ccm.c
M providers/implementations/ciphers/cipher_sm4_gcm.c
M providers/implementations/include/prov/ciphercommon_aead.h
Log Message:
-----------
Add dupctx support to aead ciphers
Add dupctx method support to to ciphers implemented with IMPLEMENT_aead_cipher
This includes:
aes-<kbits>-gcm
aria-<kbits>-ccm
aria-<kbits>-gcm
sm4-<kibs>-gcm
Fixes #21887
Reviewed-by: Paul Dale <pauli at openssl.org>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21933)
Commit: 2c021e7d11f03ede2330398c4fd8e8c7bd8768ee
https://github.com/openssl/openssl/commit/2c021e7d11f03ede2330398c4fd8e8c7bd8768ee
Author: Neil Horman <nhorman at openssl.org>
Date: 2023-09-12 (Tue, 12 Sep 2023)
Changed paths:
M providers/implementations/ciphers/cipher_aes_wrp.c
Log Message:
-----------
implement dupctx for aes_WRAP methods
create a dupctx method for aes_WRAP implementations of all sizes
Fixes #21887
Reviewed-by: Paul Dale <pauli at openssl.org>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21933)
Commit: c32c3f2653e6c6ac42e09a83a2f51f8667827a04
https://github.com/openssl/openssl/commit/c32c3f2653e6c6ac42e09a83a2f51f8667827a04
Author: Neil Horman <nhorman at openssl.org>
Date: 2023-09-12 (Tue, 12 Sep 2023)
Changed paths:
M providers/implementations/ciphers/cipher_aes_gcm_siv.c
Log Message:
-----------
Fix aes_gcm_siv dupctx function
This cipher family has a dupctx function, but was failing because it was
attempting to memdup a field only if it was null
Fix the conditional check to get it working again
Fixes #21887
Reviewed-by: Paul Dale <pauli at openssl.org>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21933)
Commit: df93b3c9e72571876bd01e5a50a5ba8368c6c77f
https://github.com/openssl/openssl/commit/df93b3c9e72571876bd01e5a50a5ba8368c6c77f
Author: Neil Horman <nhorman at openssl.org>
Date: 2023-09-12 (Tue, 12 Sep 2023)
Changed paths:
M providers/implementations/ciphers/cipher_chacha20_poly1305.c
Log Message:
-----------
implement dupctx for chacha20_poly1305
Same as chacha20 in the last commit, just clone the ctx and its
underlying tlsmac array if its allocated
Fixes #21887
Reviewed-by: Paul Dale <pauli at openssl.org>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21933)
Commit: 123c85864fa7fe97d8ae3a09989d410501d957a5
https://github.com/openssl/openssl/commit/123c85864fa7fe97d8ae3a09989d410501d957a5
Author: Neil Horman <nhorman at openssl.org>
Date: 2023-09-12 (Tue, 12 Sep 2023)
Changed paths:
M providers/implementations/ciphers/cipher_aes_cbc_hmac_sha.c
M providers/implementations/ciphers/cipher_rc4_hmac_md5.c
Log Message:
-----------
Add dupctx support to rc4_hmac_md5 algo
Pretty straightforward, just clone the requested context, no pointers to
fixup
Fixes #21887
Reviewed-by: Paul Dale <pauli at openssl.org>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21933)
Compare: https://github.com/openssl/openssl/compare/9912dfb98c9c...123c85864fa7
More information about the openssl-commits
mailing list