[openssl/openssl] eadf69: Fix kbkdf bug if MAC is set to KMAC and then somet...

Pauli noreply at github.com
Wed Jul 17 04:17:03 UTC 2024


  Branch: refs/heads/openssl-3.2
  Home:   https://github.com/openssl/openssl
  Commit: eadf6912faba9ad5690d48009db91ee9a52bff30
      https://github.com/openssl/openssl/commit/eadf6912faba9ad5690d48009db91ee9a52bff30
  Author: Pauli <ppzgs1 at gmail.com>
  Date:   2024-07-17 (Wed, 17 Jul 2024)

  Changed paths:
    M providers/implementations/kdfs/kbkdf.c

  Log Message:
  -----------
  Fix kbkdf bug if MAC is set to KMAC and then something else

A context that is set to KMAC sets the is_kmac flag and this cannot be reset.
So a user that does kbkdf using KMAC and then wants to use HMAC or CMAC will
experience a failure.

Reviewed-by: Tom Cosgrove <tom.cosgrove at arm.com>
Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24883)

(cherry picked from commit f35fc4f184fa8a2088cd16648c4017fa321d6712)


  Commit: ae79bf786ea46b55a441badd8a6e543ed9a66d21
      https://github.com/openssl/openssl/commit/ae79bf786ea46b55a441badd8a6e543ed9a66d21
  Author: Pauli <ppzgs1 at gmail.com>
  Date:   2024-07-17 (Wed, 17 Jul 2024)

  Changed paths:
    M test/evp_kdf_test.c

  Log Message:
  -----------
  Unit test for switching from KMAC to other MAC in kbkdf.

Reviewed-by: Tom Cosgrove <tom.cosgrove at arm.com>
Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24883)

(cherry picked from commit 90c3db9e6a2bfbc1086d6d4b90d4fc7c7e565b93)


Compare: https://github.com/openssl/openssl/compare/b0dd54fd127f...ae79bf786ea4

To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications


More information about the openssl-commits mailing list