[openssl/openssl] 5a0b25: Fix kbkdf bug if MAC is set to KMAC and then somet...

[Pauli]

  Branch: refs/heads/openssl-3.1
  Home:   https://github.com/openssl/openssl
  Commit: 5a0b25e795ad50b86e5417162bae73abefbae663
      https://github.com/openssl/openssl/commit/5a0b25e795ad50b86e5417162bae73abefbae663
  Author: Pauli <ppzgs1 at gmail.com>
  Date:   2024-07-17 (Wed, 17 Jul 2024)

  Changed paths:
    M providers/implementations/kdfs/kbkdf.c

  Log Message:
  -----------
  Fix kbkdf bug if MAC is set to KMAC and then something else

A context that is set to KMAC sets the is_kmac flag and this cannot be reset.
So a user that does kbkdf using KMAC and then wants to use HMAC or CMAC will
experience a failure.

Reviewed-by: Tom Cosgrove <tom.cosgrove at arm.com>
Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24883)

(cherry picked from commit f35fc4f184fa8a2088cd16648c4017fa321d6712)


  Commit: 29ebcb69d2c849e724c718443cf5a13723a4368e
      https://github.com/openssl/openssl/commit/29ebcb69d2c849e724c718443cf5a13723a4368e
  Author: Pauli <ppzgs1 at gmail.com>
  Date:   2024-07-17 (Wed, 17 Jul 2024)

  Changed paths:
    M test/evp_kdf_test.c

  Log Message:
  -----------
  Unit test for switching from KMAC to other MAC in kbkdf.

Reviewed-by: Tom Cosgrove <tom.cosgrove at arm.com>
Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24883)

(cherry picked from commit 90c3db9e6a2bfbc1086d6d4b90d4fc7c7e565b93)


Compare: https://github.com/openssl/openssl/compare/c11b83eddf7a...29ebcb69d2c8

To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications