[openssl/openssl] 24fa24: Fix kbkdf bug if MAC is set to KMAC and then somet...

[Pauli]

  Branch: refs/heads/openssl-3.3
  Home:   https://github.com/openssl/openssl
  Commit: 24fa24b3e68828acfbae2269e3ae3ea0d240c6c7
      https://github.com/openssl/openssl/commit/24fa24b3e68828acfbae2269e3ae3ea0d240c6c7
  Author: Pauli <ppzgs1 at gmail.com>
  Date:   2024-07-17 (Wed, 17 Jul 2024)

  Changed paths:
    M providers/implementations/kdfs/kbkdf.c

  Log Message:
  -----------
  Fix kbkdf bug if MAC is set to KMAC and then something else

A context that is set to KMAC sets the is_kmac flag and this cannot be reset.
So a user that does kbkdf using KMAC and then wants to use HMAC or CMAC will
experience a failure.

Reviewed-by: Tom Cosgrove <tom.cosgrove at arm.com>
Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24883)

(cherry picked from commit f35fc4f184fa8a2088cd16648c4017fa321d6712)


  Commit: c45adff74bac367cf7a835cd42ece3f538c6bf40
      https://github.com/openssl/openssl/commit/c45adff74bac367cf7a835cd42ece3f538c6bf40
  Author: Pauli <ppzgs1 at gmail.com>
  Date:   2024-07-17 (Wed, 17 Jul 2024)

  Changed paths:
    M test/evp_kdf_test.c

  Log Message:
  -----------
  Unit test for switching from KMAC to other MAC in kbkdf.

Reviewed-by: Tom Cosgrove <tom.cosgrove at arm.com>
Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24883)

(cherry picked from commit 90c3db9e6a2bfbc1086d6d4b90d4fc7c7e565b93)


Compare: https://github.com/openssl/openssl/compare/5c3227e94e84...c45adff74bac

To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications